CVE-2026-46459CWE-862

Missing Authorization in ICU Scandinavia Boomerang

Medium · published July 15, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database.

This issue has been fixed in version 2.4.18.029

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00433 · 36.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-07-15T12:51Z
EPSS history
Timeline
  • 15 JUL 12:51Z
    Missing Authorization in ICU Scandinavia Boomerang
    cvelistv5