https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:15:51.112875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-45137 CVE-2022-45137 — WAGO: Reflective Cross-Site Scripting 2026-10-07T13:15:51.148676+00:00

Affected: WAGO Compact Controller CC100 (751-9301), WAGO Edge Controller (752-8303/8000-002), WAGO PFC100 (750-81xx/xxx-xxx), WAGO PFC200 (750-82xx/xxx-xxx), WAGO Touch Panel 600 Advanced Line (762-5xxx), WAGO Touch Panel 600 Marine Line (762-6xxx), WAGO Touch Panel 600 Standard Line (762-4xxx)

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

 https://cve.radiocsirt.org/vuln/vde-2022-060 VDE-2022-060 — WAGO: Multiple vulnerabilities in web-based management of multiple products 2026-10-07T13:15:51.148757+00:00

The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Additionally, the web-based management suffers a CORS misconfiguration and allows reflected XSS (Cross-Site Scripting) attacks.