CVE-2026-3587 in Lean Managed Switch 852-1812

Résumé

par MITRE • 23/03/2026

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: CERTVDE
• Réserver: 05/03/2026
• Divulgation: 23/03/2026
• Modérer: accepté
• Entrée: VDB-352498
• CPE: prêt
• CWE: CWE-912 (confirmé)
• CVSS: 10.0 (CNA)
• EPSS: 0.00136
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-3587
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3587
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-3587/