CRITICAL

CVE-2026-78225

2026-09-15 CVSS v3.1

CVSS

9

Description

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

Weakness (CWE)

CWE-321

EPSS Score

0.41%

Probability of exploitation in next 30 days

35.3th percentile

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-02.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02 https://www.wartsila.com/services-catalogue/engine-services-4-stroke/wartsila-ics-patch-deployment#contact

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.