VYPR
High severity8.8NVD Advisory· Published Oct 20, 2026

WAGO: OS Command Injection in WBM Routing Configuration

CVE-2026-80466

Description

A vulnerability in the Web-Based Management (WBM) routing configuration allows a low-privileged remote attacker to inject shell commands into routing parameters. Due to insufficient input validation, these values are stored in a configuration file and later processed by a privileged root helper script.

Affected products

1

Patches

Vulnerability mechanics

News mentions

1