{"uuid": "076e6a66-6ac8-413a-ad68-c41dd7d95578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31886", "type": "seen", "source": "https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html", "content": "Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware.\n\nThe exploit targets CVE-2021-31886, a stack-based buffer overflow in the Nucleus FTP server's handling of the USER command", "creation_timestamp": "2026-09-03T01:00:32.081382Z"}