Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-89207

WTV676-HB6035 Web Interface · Vulnerability

CVSS 3.1 6.5 MEDIUMCVSS 4.0 6.9 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-89207

Published

A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into protection mode, which results in losing remote connectivity functions (Web Access).

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-89207

Published

WTV676-HB6035 Web Interface

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Siemens",
                    "product": "WTV676-HB6035 Web Interface",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "V3.94",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

WTV776-HB6035 Web Interface

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Siemens",
                    "product": "WTV776-HB6035 Web Interface",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "V4.17",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON