Solution Builder vulnerabilities

2 known vulnerabilities in Solution Builder from WAGO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Device Sphere: Improper Filtering of Special Elements

  CVE-2026-2328Mar 30, 2026WAGO

  An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.

• 9.8 Critical severity

  Device Sphere: Missing Authentication for Critical Functionality

  CVE-2025-41715Sep 24, 2025WAGO

  The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.