knob

knob Sizing of onboard storage in a tramway and positioning of a power substation...

EUVD-2026-80012

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

EUVD-2026-80010

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

CVE-2026-78225

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

CVE-2026-81855 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard , a marine engine management platform. An attacker with network access and no prior privileges can exploit this to gain high confidentiality and high integrity...

CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

CVE-2026-78225 Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

CVE-2026-78225

Wärtsilä FOS-Onboard contains a hardcoded cryptographic server key in the deployer-ng Update Controller component. This allows an attacker with network access and high complexity to achieve full compromise of confidentiality, integrity, and availability on both the vulnerable and subsequent syste...

Wärtsilä FOS-Onboard (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to allow the attacker to impersonate a privileged client. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

CVE-2026-78225: Use of Hard-coded Cryptographic Key

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...

PT-2026-93181

Name of the Vulnerable Software and Affected Versions Wärtsilä FOS-Onboard affected versions not specified Description A hardcoded cryptographic server key exists within the deployer-ng Update Controller component. This issue involves the use of a fixed key for cryptographic operations, which can...

CVE-2026-81855: Use of Hard-coded Cryptographic Key

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard...

PT-2026-93182

Name of the Vulnerable Software and Affected Versions Wärtsilä FOS-Onboard affected versions not specified Description A hardcoded cryptographic client authentication key exists within the robot testing framework component. This issue allows for the potential bypass of authentication mechanisms d...

An Empirical Security Analysis of Open-Source Software Used in Onboard Satellite Systems

The use of open-source software OSS in satellite flight systems is increasing as missions adopt reusable frameworks, shared libraries, and community-maintained components. While this accelerates development, it also introduces software-security risks into systems where patching is costly and...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1777 more potentially affected by CVE-2026-90771 via joi (>=17.1.1, <=17.13.7)

joi NPM version =17.1.1, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-90771 Source advisory: GHSA-WR44-6HXH-3JWQ...

RLSA-2026:62578 Important: go-fdo-server security update

This package provides a server-side implementation of the FIDO Device Onboard FDO specification, written in Go. FDO is an open standard for the late binding of device credentials, allowing for automated and secure on-boarding of devices when they are first powered on in their final location...

@0xsequence/web3-onboard-plugin (2.0.5), @0xzoz/tallyho (>=2.0.11, <=2.0.14) +1775 more potentially affected by CVE-2026-84367 via joi (>=17.1.1, <=17.13.4)

joi NPM version =17.1.1, =2.0.11, =0.1.6-alpha.2, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.0.1, =1.16.17-beta-0213b250, =1.8.31, =1.1.12, =1.7.1, =1.8.31, =1.0.0, =1.16.34-beta-20241113-102431-65542b84 and more Source cves: CVE-2026-84367 Source advisory: MEND:CVE-2026-84367...