CVE-2026-2328 HIGH

CVE-2026-2328: Backend Access Due to Insufficient Input Validation

Vendor Wago
Product Device Sphere
Weakness CWE-790
Published March 30, 2026
Last update March 30, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.

Key dates

02Disclosure timeline

March 30, 2026 CVE published
March 30, 2026 Record updated