CVE-2026-44105

The CVE-2026-44105 entry describes that credentials for the local user “user-app” may be exposed in log files, potentially allowing a low-privileged local attacker with log access to authenticate via SSH as user-app. The available metrics indicate LOCAL attack vector, low user interaction, with a...

CVE-2026-44094

The CVE-2026-44094 entry describes an unauthenticated remote attacker forcing a device to fall back to a firmware partition (second RAUC slot) with insecure configuration and default credentials, enabling SSH access as the unprivileged user "user-app". This could disrupt charging due to compromis...