WAGO Switches Vulnerability Allows Full Device Compromise

WAGO industrial managed switches contain a hidden CLI function that an unauthenticated remote attacker can exploit to escape a restricted interface and fully compromise devices (CVE-2026-3587).

Part of the PlainSec briefing for 2026-03-27

Sources

CISA Advisories

WAGO Switches Vulnerability Allows Full Device CompromiseWAGO industrial managed switches contain a hidden CLI function that an unauthenticated remote attacker can exploit to escape a restricted interface and fully compromise devices (CVE-2026-3587).Part of the PlainSec briefing for 2026-03-27Sources

CISA Advisories