Skip to content
OpenAdvisories
High ICSA-26-258-02 2 CVEs

Wärtsilä FOS-Onboard (Update A)

Published Sep 15, 2026 · Updated Sep 24, 2026 · Revision 2

Vendor: Wärtsilä Product: FOS-Onboard

Summary

Successful exploitation of these vulnerabilities could allow an attacker to deliver an unauthorized update, execute code, or extract credentials to allow the attacker to impersonate a privileged client.

Vulnerabilities 2

  • Critical 9.1
    CVE-2026-81855

    Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

    A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.

    Wärtsilä FOS-Onboard
  • Critical 9.0
    CVE-2026-78225

    Wärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key

    A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

    Wärtsilä FOS-Onboard

Revision history

  1. #2

    Update A - Added link and version number for fixed version.

  2. #1

    Initial Publication

References