CVE-2026-81855

Deferred Deferred - Pending Action

Hard-Coded Authentication Key in Wärtsilä FOS-Onboard

Publication date: 2026-09-15

Last updated on: 2026-09-24

Assigner: ICS-CERT

Description

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-24

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-81855

EUVD

EUVD-2026-80012

Affected Vendors & Products

Vendor	Product	Version / Range
wärtsilä	fos-onboard	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-321	The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability involves a hardcoded cryptographic client authentication key in the robot testing framework component of Wärtsilä FOS-Onboard. This means the key is embedded in the software and not changeable, allowing unauthorized access to systems using this framework.

Impact Analysis

An attacker could exploit this to gain unauthorized access to systems running Wärtsilä FOS-Onboard, potentially leading to data breaches, system manipulation, or disruption of operations. The high CVSS scores indicate significant risk of confidentiality and integrity compromise.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and system security in GDPR and HIPAA due to the risk of unauthorized access and data exposure. Organizations using this software may face regulatory penalties and must address it promptly.

Mitigation Strategies

Immediate mitigation steps include replacing the hardcoded cryptographic client authentication key in the Wärtsilä FOS-Onboard robot testing framework component with a dynamically generated key. Ensure all instances of the key are removed and regenerate credentials for affected systems.

Hi! I’m here to help you understand CVE-2026-81855. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70