EUVD-2026-86156

The door access control on a Norwegian Cruise Line asset grants entry based only on the credential's static 7-byte UID stored on an NTAG212 NFC chip. A UID is a manufacturer serial number sent in the clear on every read and is not intended to be secret or to authenticate the holder. Validating on...

CVE-2026-75907

The door access control on a Norwegian Cruise Line asset is vulnerable because it grants entry based solely on the static 7-byte UID of an NTAG212 NFC chip . Since this UID is a manufacturer serial number sent in the clear and lacks challenge-response capabilities , the system performs identifica...