10.0 CriticalCWE-912
CVE-2026-3587
Hidden CLI Function Allows Root Access
WAGOLean Managed Switch 852-1812
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.7%probability of exploitation in the next 30 days
Higher than 53% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.
Coverage 1 article · 1 outlet
- WAGO GmbH & Co. KG Industrial Managed SwitchesCISA · first in our coverage · official notice