CVE-2026-78225

EUVD-2026-80010 CRITICAL

Use of Hard-coded Cryptographic Key (CWE-321)

2026-09-15 ics-cert@hq.dhs.gov

GHSA-xr64-qq65-vf4r

Information Disclosure

9.5

CVSS 4.0 · Vendor: hq

Severity by source

Vendor (hq) PRIMARY

9.5 CRITICAL

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (hq) · only source for this CVE.

CVSS VectorVendor: hq

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 22:32 vuln.today

CVE Published

Sep 15, 2026 - 22:17 cve.org

CRITICAL 9.5

DescriptionCVE.org

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

AnalysisAI

We need answer JSON only. Need follow instructions. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

Same weakness CWE-321 – Use of Hard-coded Cryptographic Key

View all

CVE-2016-4437 CRITICAL POC

9.8

CVE-2025-30406 CRITICAL POC

9.0

CVE-2023-32077 HIGH POC

7.5

CVE-2025-13316 HIGH POC

8.2

CVE-2020-10884 HIGH POC

8.8

CVE-2025-57174 CRITICAL POC

9.8

CVE-2022-0664 CRITICAL POC

9.8

CVE-2025-59407 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2026-78225 vulnerability details – vuln.today

Back