Skip to content

Known vulnerabilities in WAGO 0852-1322

Is your version affected?

CVE Summary Score Published
CVE-2026-22906 User credentials are stored using AES‑ECB encryption with a hardcoded key 9.8 Critical Feb 9, 2026
CVE-2026-22905 An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path… 7.5 High Feb 9, 2026
CVE-2026-22904 Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote… 9.8 Critical Feb 9, 2026
CVE-2026-22903 An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie 9.8 Critical Feb 9, 2026

Other WAGO products