WAGO OS Linux

WAGO has disclosed an authorization bypass in its Web-Based Management interface that improperly enforces permissions for PROFIBUS configuration operations, enabling a low-privileged remote attacker to change root-owned PROFIBUS parameters (e.g., device addressing and SSA settings). Multiple WAGO firmware versions prior to 4.10.0 across a wide range of hardware are listed as affected; remediation is to update to firmware 4.10.0 (FW32) or higher and follow guidance from WAGO PSIRT and the VDE-2026-096 advisory.