CVE-2026-40425CWE-552

MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties

Medium · published May 29, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

The administrator account for the

Danelec MacGregor Voyage Data Recorder

web interface can directly edit sensitive files related to authentication, potentially changing the root password.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00602 · 48.1th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2026-05-29T17:47Z
EPSS history
Timeline
  • 29 MAY 17:47Z
    MacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties
    cvelistv5