https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T17:58:55.896041+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-41753 CVE-2025-41753 — Path traversal in dynamically created BACnet File Objects 2026-10-01T17:58:55.898956+00:00

Affected: WAGO 0751-9x01, WAGO 0750-811x-xxxx-xxxx, WAGO 0750-821x-xxx-xxx, WAGO 0762-420x-8000-000x, WAGO 0762-430x-8000-000x, WAGO 0762-520x-8000-000x, WAGO 0762-530x-8000-000x, WAGO 0762-620x-8000-000x, WAGO 0762-630x-8000-000x, WAGO 0752-8303-8000-0002 and 1 more

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.