Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-22905

Authentication Bypass via URI Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration downloads.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0852-1322

Default version status: unaffected

  • 0.0.0 to ≤ 2.64affected

WAGO 0852-1328

Default version status: unaffected

  • 0.0.0 to ≤ 2.64affected

WAGO 0852-1322

Default version status: unaffected

  • 2.64affected

WAGO 0852-1328

Default version status: unaffected

  • 2.64affected

References