Vega vulnerabilities
We track 3 vulnerabilities in Vega products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
Latest Vega vulnerabilities
- 7.5 High severity
VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC…: Missing Authentication for Critical Functionality
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
- 9.3 Critical severity
vega: Improper Neutralization of Input During Web Page Generation
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Prior to versions 6.1.2 and 5.6.3, applications meeting two conditions are at risk of arbitrary JavaScript code execution, even if "safe
- 8.1 High severity
vega: Improper Neutralization of Input During Web Page Generation
Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In Vega prior to version 6.2.0, applications meeting 2 conditions are at risk of arbitrary JavaScript code execution, even if "safe mode"