CVE record · CVE-2026-3587

Hidden CLI Function Allows Root Access

CVSS 10.0 CriticalCriticalEPSS 0.0069 · 52nd percentile

Critical, because:

CVSS score 10.0: 9.0 or more.

Published by the CVE Program (CNA: CERTVDE) at 23 Mar 2026, 07:49 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
WAGO	Lean Managed Switch 852-1812	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1813	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1813-000-001	affected 0.0.0 to before V1.2.3.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1816	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-303	affected 0.0.0 to before V1.2.8.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-1305	affected 0.0.0 to before V1.2.0.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-1305-000-001	affected 0.0.0 to before V1.2.0.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-1505-000-001	affected 0.0.0 to before V1.2.0.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-1505	affected 0.0.0 to before V1.1.9.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-602	affected 0.0.0 to before V1.0.6.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-603	affected 0.0.0 to before V1.0.6.S0 semver Other versions: unaffected
WAGO	Industrial Managed Switch 852-1605	affected 0.0.0 to before V1.2.5.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1812-010-000	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1813-010-000	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1816-010-000	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected
WAGO	Lean Managed Switch 852-1813/010-001	affected 0.0.0 to before V1.2.1.S0 semver Other versions: unaffected

Identifiers: CVE-2026-3587
CNA: CERTVDE
Weakness (CWE): CWE-912
Tags: WAGO Lean Managed Switch 852-1812
WAGO Lean Managed Switch 852-1813
WAGO Lean Managed Switch 852-1813-000-001
WAGO Lean Managed Switch 852-1816
WAGO Industrial Managed Switch 852-303
WAGO Industrial Managed Switch 852-1305
WAGO Industrial Managed Switch 852-1305-000-001
WAGO Industrial Managed Switch 852-1505-000-001
CWE-912
Published: 23 Mar 2026
Updated: 24 Mar 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
10.0	Critical	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	CNA (CERTVDE)

CISA KEV Not listed.
EPSS 0.0069, the 52nd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 23 Mar 2026. New records show when each source confirmed them.

Sources

References from the CNA

certvde.com/de/advisories/VDE-2026-020

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.