https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:34:44.745589+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-19519 cnvd-2020-19519 2026-10-02T11:34:44.749283+00:00 cnvd-2020-19519 https://cve.radiocsirt.org/vuln/euvd-2026-50023 EUVD-2026-50023 2026-10-02T11:34:44.749314+00:00 EUVD-2026-50023 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5156 fkie_cve-2019-5156 2026-10-02T11:34:44.749329+00:00

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.

 https://cve.radiocsirt.org/vuln/ghsa-4wh8-v3px-8552 GHSA-4wh8-v3px-8552 2026-10-02T11:34:44.749356+00:00

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.

 https://cve.radiocsirt.org/vuln/gsd-2019-5156 gsd-2019-5156 2026-10-02T11:34:44.749373+00:00 gsd-2019-5156 https://cve.radiocsirt.org/vuln/vde-2020-008 VDE-2020-008 — WAGO: Cloud Connectivity Multiple Vulnerabilities 2026-10-02T11:34:44.749384+00:00

The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login with administrative privileges on the device in order to exploit the mentioned vulnerabilities.