CVE-2026-3587 CRITICAL

CVE-2026-3587: Hidden CLI Function Allows Root Access

Vendor Wago
Product Lean Managed Switch 852-1812
Weakness CWE-912
Published March 23, 2026
Last update March 24, 2026
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

Key dates

02Disclosure timeline

March 23, 2026 CVE published
March 24, 2026 Record updated