Skip to content

Known vulnerabilities in WAGO 0852-1328

Is your version affected?

CVE Summary Score Published
CVE-2026-22906 User credentials are stored using AES‑ECB encryption with a hardcoded key 9.8 Critical Feb 9, 2026
CVE-2026-22904 Improper length handling when parsing multiple cookie fields (including TRACKID) allows an unauthenticated remote… 9.8 Critical Feb 9, 2026
CVE-2026-22903 An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie 9.8 Critical Feb 9, 2026

Other WAGO products