CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 23:37.

Filters

1 active

Reset filters

Search: VDE-2026-004

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2026-004

WAGO: Vulnerabilities in Managed Switch

WAGO — Industrial Managed Switch

WAGO PSIRTcritical

Published

9 February 2026

Last update

9 February 2026

Linked CVEs

CVE-2026-22903 CVE-2026-22904 CVE-2026-22905 CVE-2026-22906

Affected sectors

Risk evaluation

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.

Mitigation summary

Please update your devices to the specified fixed firmware version 02.65.

Revision history (1)

Initial publication — 9 February 2026
Release version.

Official source: WAGO PSIRT