CVE-2026-2328 in WAGO Device Sphere
摘要 (英语)
An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.
负责
CERTVDE
预定
2026-02-11
披露
2026-03-30
条目
| 标识符 | 漏洞 | CWE | 基础 | 临时 | 0day | 今天 | 可利用 | KEV | EPSS | CTI | 对策 | CVE |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 354153 | WAGO Device Sphere/Solution Builder 信息公开 | 790 | 6.4 | 6.3 | $0-$5k | $0-$5k | 未定义 | 0.00000 | 4.20 | 官方修复 | CVE-2026-2328 |