https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:16:07.605893+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-17495 cnvd-2020-17495 2026-10-03T02:16:07.683038+00:00 cnvd-2020-17495 https://cve.radiocsirt.org/vuln/euvd-2026-50013 EUVD-2026-50013 2026-10-03T02:16:07.683077+00:00 EUVD-2026-50013 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5155 fkie_cve-2019-5155 2026-10-03T02:16:07.683092+00:00

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

 https://cve.radiocsirt.org/vuln/ghsa-2g7j-m3mp-pr8p GHSA-2g7j-m3mp-pr8p 2026-10-03T02:16:07.683123+00:00

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

 https://cve.radiocsirt.org/vuln/gsd-2019-5155 gsd-2019-5155 2026-10-03T02:16:07.683140+00:00 gsd-2019-5155 https://cve.radiocsirt.org/vuln/vde-2020-008 VDE-2020-008 — WAGO: Cloud Connectivity Multiple Vulnerabilities 2026-10-03T02:16:07.683151+00:00

The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login with administrative privileges on the device in order to exploit the mentioned vulnerabilities.