10.0
Critical
CVE-2025-41672 A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool…
Description
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Wago Device Sphere | 1.0.0 | No fix stated |