{"uuid": "9f5a60dc-2da4-4b83-801b-0709ce81c7d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31886", "type": "seen", "source": "https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html", "content": "Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware.\n\nThe exploit targets CVE-2021-31886, a stack-based buffer overflow in the Nucleus FTP server's handling of the USER command", "creation_timestamp": "2026-09-02T10:00:45.661245Z"}