[VDE-2025-007] The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetting it to a negative number.
EPSS 0.00 CVE-2025-0101 WAGO DE
[VDE-2026-031] Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.
EPSS 0.01 CVE-2026-4769 WAGO DE
[VDE-2024-008] A security vulnerability has been identified in the Web-Based Management (WBM) function when OpenVPN is enabled.
EPSS 0.01 CVE-2024-1490 WAGO DE
[VDE-2026-010] Multiple vulnerabilities have been identified in WAGO Solution Builder and WAGO Device Sphere that affect components responsible for authentication and system communication.
EPSS 0.66 CVE-2025-55315 CVE-2026-2328 WAGO DE
[VDE-2026-021] The VC Hub incorporates the Magick.NET‑Q16‑AnyCPU component, derived from ImageMagick, to process user‑uploaded images and generate thumbnails within the projects image library. Only authenticated users with the Design Project Permission can upload images.
WAGO DE
[VDE-2026-020] A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.
EPSS 0.01 CVE-2026-3587 WAGO DE