CVE-2026-16315
Received Received - Intake

Authentication Bypass in OMICRON StationGuard

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: 57995746-fc30-4a4d-94f6-a13d079c41f4

Description
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-16315
EUVD
EUVD-2026-53921

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
omicron stationguard to 4.10 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-208 Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OMICRON StationGuard before version 4.10 has a cryptographic timing side-channel flaw in its backend authentication. This allows unauthenticated attackers to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. The flaw enables full access to system configuration, permitting unauthorized modifications or resets of system parameters.

Impact Analysis

An attacker exploiting this vulnerability could gain full control over the StationGuard system. This includes accessing and altering system configurations, resetting parameters, or making unauthorized changes that could disrupt operations or compromise security. The impact depends on the system's role in your infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized access and modification of sensitive data, violating confidentiality and integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, data breaches, and loss of trust. Organizations must address this flaw to maintain regulatory compliance.

Mitigation Strategies

Upgrade OMICRON StationGuard to version 4.10 or later to address the cryptographic timing side-channel vulnerability in the authentication mechanism.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16315. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart