Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-2328 1 Wago 2 Device Sphere, Solution Builder 2026-03-31 7.5 High
An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.
CVE-2025-41672 1 Wago 1 Device Sphere 2025-07-14 10 Critical
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.