CVE-2026-2328
High
Description
An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDevice Sphere
PublishedMar 30, 2026
First seenMar 30, 2026
Weakness typeCWE-790CWE-790
How to fix
Update
- WAGO Device Sphere1.2.2 or later
- WAGO Solution Builder2.4.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO Device Sphere | v < 1.2.2 | 1.2.2 |
| WAGO Solution Builder | v < 2.4.2 | 2.4.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.