CYBERSECURITYTRACKER
Permanent story citation

FURUNO FA-50 Class B AIS Transponder

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5022

As cited

Copy frozen at (site build).

vulnerabilities

FURUNO FA-50 Class B AIS Transponder

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

FURUNO FA-50 Class B AIS Transponder

FURUNO disclosed two critical vulnerabilities in the FA-50 Class B AIS Transponder affecting all versions. CVE-2026-59769 allows attackers with network access and credentials to alter device settings, while CVE-2026-67578 permits unauthenticated configuration changes on the management screen. The vendor ended production in October 2020 and will not provide software updates.

Why it matters: Maritime operators worldwide using end-of-life FA-50 AIS transponders face persistent exposure to hard-coded credential and authentication bypass attacks with no vendor patches available; network segmentation and physical vessel security are the only remaining mitigations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

FURUNO FA-50 Class B AIS Transponder

FURUNO disclosed two critical vulnerabilities in the FA-50 Class B AIS Transponder affecting all versions. CVE-2026-59769 allows attackers with network access and credentials to alter device settings, while CVE-2026-67578 permits unauthenticated configuration changes on the management screen. The vendor ended production in October 2020 and will not provide software updates.

Why it matters: Maritime operators worldwide using end-of-life FA-50 AIS transponders face persistent exposure to hard-coded credential and authentication bypass attacks with no vendor patches available; network segmentation and physical vessel security are the only remaining mitigations.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary