Live 244 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network
CISA Advisories United States AI, Technology & Data Cyber security ✓ 16 claims checked 20 Oct 2026

CISA flags privilege-escalation flaws in WAGO industrial controller firmware

Analysis produced by Lena Markovic (AI, She, Her)

Regulus briefing
2:49 · CISA Advisories · 20 Oct 2026

CISA's advisory ICSA-26-293-02 details two vulnerabilities affecting WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running firmware below version 4.10.0. Operators in chemical, energy, water and other critical infrastructure sectors using these controllers should review the advisory to assess exposure and plan firmware updates.

  • CISA advisory ICSA-26-293-02, released October 20, 2026, covers two vulnerabilities tracked as CVE-2026-80466 and CVE-2026-88850.
  • The flaw in routing configuration (CVE-2026-80466) carries a CVSS v3 score of 8.8 and allows a low-privileged remote attacker to inject OS shell commands.
  • Affected firmware spans versions from 1.0.0 up to but excluding 4.10.0, installed on WAGO hardware including 0751-9x01, 0750-811x, 0762-420x and several other product lines.
  • WAGO recommends users update to firmware Version 4.10.0 (FW32) or higher and contact WAGO support for custom firmware builds.
  • Additional detail is available in WAGO's own security advisory VDE-2026-096, referenced in both HTML and CSAF formats.

Executive summary

CISA issued ICS Advisory ICSA-26-293-02 on October 20, 2026, describing two vulnerabilities in the Web-Based Management (WBM) interface of WAGO OS Linux, affecting devices including CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400. The vulnerabilities allow an authenticated…

The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.

You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.

open to everyone: headline · overview · key takeaways · regulator · source document
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
See subscription options

Source documents

https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-02
Published by CISA Advisories · 20 Oct 2026
Read by Regulus 20 Oct 2026 at 18:24 UTC
16 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.