AnalysisCybersecuritySeptember 2, 2026

Claude used to port PLC exploit across WAGO models for $535

Forescout's Vedere Labs ported a pre-auth RCE exploit (CVE-2021-31886, CVSS 9.8) from a WAGO 750-852 to a 750-831 using Claude Code with Ghidra and a live PLC. The final RCE stage cost $535.74 over an 8h32m session; a later C2 attempt bricked the PLC.

2 sources

More stories today

Open the live feed