security_identifier

CVE-2026-78225

Vulnerability identifier in the CVE catalogue, recording a cryptographic server key left in the shipped code of Wärtsilä's FOS-Onboard shipboard automation software at build 5.07.0923.01.

Current clusters

security1 publisher

Hardcoded server key lets an attacker push updates to Wärtsilä FOS-Onboard installations

CISA published the advisory on September 15 covering FOS-Onboard 5.07.0923.01. Wärtsilä has built a patch, but users have to contact the company to get it, so the schedule sits with fleet service.

Publishers:cisa.gov

Reality

Evidence70
Adoption: Insufficient
Hype gap0
Incentives45
Confidence68