CVE-2022-50926

CVE-2022-50926 is a critical privilege escalation vulnerability affecting the WAGO 750-8212 PFC200 G2 2ETH RS firmware. Attackers can manipulate user session cookies by altering 'name' and 'roles' parameters to gain administrative privileges without authentication. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low complexity, allowing for full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.