{"metadata": {"vulnerability": "CVE-2026-4769", "count": 21, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-03-24T13:19:36.714Z", "date_only": false, "value": "2026-03-24T13:19:36.714Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-10T11:48:52.089Z", "date_only": false, "value": "2026-07-10T11:48:52.089Z", "kind": "other", "label": "Document generated", "source": "csaf_wagogmbhcokg \u00b7 VDE-2026-031", "record": "VDE-2026-031", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-13T06:35:01.116Z", "date_only": false, "value": "2026-07-13T06:35:01.116Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-13T06:35:01.116Z", "date_only": false, "value": "2026-07-13T06:35:01.116Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERTVDE", "record": "CVE-2026-4769", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-13T07:00:00Z", "date_only": false, "value": "2026-07-13T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_wagogmbhcokg \u00b7 VDE-2026-031", "record": "VDE-2026-031", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-07-13T07:00:00Z", "date_only": false, "value": "2026-07-13T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_wagogmbhcokg \u00b7 VDE-2026-031", "record": "VDE-2026-031", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-13T07:00:00Z", "date_only": false, "value": "2026-07-13T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_wagogmbhcokg \u00b7 VDE-2026-031", "record": "VDE-2026-031", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-07-13T07:21:18.817Z", "date_only": false, "value": "2026-07-13T07:21:18.817698Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/certvde/statuses/116911458109125585", "record": "CVE-2026-4769", "field": "creation_timestamp", "uuid": "cd489a8e-b1bf-4f60-a441-fabd633c3214", "content": "#OT #Advisory VDE-2026-031WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices\nCertain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.#CVE CVE-2026-4769\nhttps://certvde.com/en/advisories/vde-2026-031/\n#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-031.json", "url": "https://infosec.exchange/users/certvde/statuses/116911458109125585"}, {"timestamp": "2026-07-13T07:54:49.692Z", "date_only": false, "value": "2026-07-13T07:54:49.692305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l", "record": "CVE-2026-4769", "field": "creation_timestamp", "uuid": "f6a30275-5834-4d54-8405-992d68353348", "content": "CVE-2026-4769 exposes WAGO System I/O field devices. An early-boot flaw lets an unauthenticated attacker reach full system compromise.\n#WAGO #CVE20264769 #ICS #OTSecurity #Firmware", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l"}, {"timestamp": "2026-07-13T08:16:21Z", "date_only": false, "value": "2026-07-13T08:16:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2R6R-VGG5-P59V", "record": "GHSA-2R6R-VGG5-P59V", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-07-13T08:16:21.343Z", "date_only": false, "value": "2026-07-13T08:16:21.343", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4769", "record": "FKIE_CVE-2026-4769", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-13T08:30:05.774Z", "date_only": false, "value": "2026-07-13T08:30:05.774274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbmvfwld2x", "record": "CVE-2026-4769", "field": "creation_timestamp", "uuid": "7cc893dc-ad37-417c-9912-ea1cd40c5970", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-4769 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 WAGO System I/O Field: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EE685329-225C-40E1-9380-2C16BAB2E3C8", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbmvfwld2x"}, {"timestamp": "2026-07-13T09:08:05.262Z", "date_only": false, "value": "2026-07-13T09:08:05.262963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqjdqsvy422q", "record": "CVE-2026-4769", "field": "creation_timestamp", "uuid": "a8d40e93-45b7-4edb-a3d7-ef1bfecd730f", "content": "CVE-2026-4769\nWAGO System I/O Field devices have a hidden diagnostic mode that becomes accessible for a short time during startup. This allows an attacker to access the device's internal processes without a password,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mqjdqsvy422q"}, {"timestamp": "2026-07-13T09:31:42Z", "date_only": false, "value": "2026-07-13T09:31:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2R6R-VGG5-P59V", "record": "GHSA-2R6R-VGG5-P59V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-13T09:31:42Z", "date_only": false, "value": "2026-07-13T09:31:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2R6R-VGG5-P59V", "record": "GHSA-2R6R-VGG5-P59V", "field": "modified", "linked_record": true}, {"timestamp": "2026-07-13T10:04:33.200Z", "date_only": false, "value": "2026-07-13T10:04:33.200420Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjgvs2k2e2g", "record": "CVE-2026-4769", "field": "creation_timestamp", "uuid": "48553d6a-e8d7-4430-b006-3877481f16e5", "content": "CVE-2026-4769 - Unauthenticated Access to Internal Diagnostic Interface\nCVE ID : CVE-2026-4769\n \n Published : July 13, 2026, 8:16 a.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability durin...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjgvs2k2e2g"}, {"timestamp": "2026-07-13T14:44:35.455Z", "date_only": false, "value": "2026-07-13T14:44:35.455141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4769", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-13T14:44:35.455Z", "date_only": false, "value": "2026-07-13T14:44:35.455141Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4769", "record": "FKIE_CVE-2026-4769", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-07-13T14:44:48.962Z", "date_only": false, "value": "2026-07-13T14:44:48.962Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-13T14:44:48.962Z", "date_only": false, "value": "2026-07-13T14:44:48.962Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-4769", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-13T19:58:29.933Z", "date_only": false, "value": "2026-07-13T19:58:29.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-4769", "record": "FKIE_CVE-2026-4769", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-05T20:52:05.069Z", "anchors": {"origin": {"timestamp": "2026-07-13T06:35:01.116Z", "date_only": false, "value": "2026-07-13T06:35:01.116Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-13T06:35:01.116Z", "date_only": false, "value": "2026-07-13T06:35:01.116Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9987423.953498, "hours": 2774.2844315272223, "days": 115.5951846469676, "min_seconds": 9987423.953498, "max_seconds": 9987423.953498, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-13T06:35:01.116Z", "date_only": false, "value": "2026-07-13T06:35:01.116Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-4769", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T20:52:05.069Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}