CVE-2026-67578CWE-306

CVE-2026-67578

High · published August 25, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

FA-50 all versions miss authentication for some configuration.

An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00537 · 44.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-08-25T12:18Z
References (3)
https://jvn.jp/en/vu/JVNVU95422936/ · [email protected]https://www.furuno.co.jp/en/news/notice/notice_category.html?itemid=1857&dispmid=965 · [email protected]https://www.furuno.co.jp/news/notice/notice_category.html?itemid=1856&dispmid=1039 · [email protected]
EPSS history
Timeline
  • 26 AUG 08:22Z
    EPSS moved — → 0%
    epss
  • 25 AUG 07:42Z
    FA-50 all versions miss authentication for some configuration
    cvelistv5