Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WAGO Solution Builder 2.3.3 Clear all filters
TI-2025-27679 CVE-2025-41716 · GHSA-xmf5-4wmv-38v8

Unauthenticated User Enumeration via Missing Authentication

Priority LOW 30

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00403 Published 2025-09-24 Fixed in 2.3.3 CWE-306
TI-2025-27678 CVE-2025-41715 · GHSA-hwp7-72wv-8w95

Missing Authentication for Database Access in Web Application

Priority MEDIUM 49

The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2025-09-24 Fixed in 1.1.0, 2.3.3 CWE-306