Skip to content
OpenAdvisories
Critical ICSA-26-083-01 1 CVE

Pharos Controls Mosaic Show Controller

Published Mar 24, 2026 · Updated Mar 24, 2026

Vendor: Pharos Controls Product: Mosaic Show Controller Firmware

Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary commands with root privileges.

Vulnerabilities 1

  • Critical 9.3
    CVE-2026-2417

    Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

    A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges.

    Pharos Controls Mosaic Show Controller

Revision history

  1. #1

    Initial Publication

References