High severity8.8NVD Advisory· Published Oct 20, 2026
WAGO: OS Command Injection in WBM Routing Configuration
CVE-2026-80466
Description
A vulnerability in the Web-Based Management (WBM) routing configuration allows a low-privileged remote attacker to inject shell commands into routing parameters. Due to insufficient input validation, these values are stored in a configuration file and later processed by a privileged root helper script.
Affected products
1Patches
Vulnerability mechanics
News mentions
1- WAGO OS LinuxCISA ICS Advisories