CVE-2026-16315CWE-208

CVE-2026-16315

High · published August 6, 2026

CVSS v3.1
8.7
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients.

An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.1th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2026-08-06T18:16Z
References (1)
EPSS history
Timeline
  • 06 AUG 13:14Z
    Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard
    cvelistv5