As cited
Copy frozen at (site build).
vulnerabilities
Wärtsilä FOS-Onboard
Wärtsilä FOS-Onboard version 5.07.0923.01 contains two critical hardcoded cryptographic key vulnerabilities (CVE-2026-78225, CVE-2026-81855) in its Update Controller and robot testing framework components that could enable unauthorized updates, code execution, or credential extraction. The vendor states the flaws are not exploitable under recommended installation practices and has developed security patches available through Wärtsilä's support channels. No public exploitation has been reported as of September 15, 2026.
Why it matters: Operators of Wärtsilä FOS-Onboard in maritime transportation globally should patch immediately or verify their systems meet recommended installation practices, since these vulnerabilities carry CVSS scores of 9.0 to 9.5 and could allow remote attackers to compromise vessel systems.
- Source published
- First seen by Cybersecurity Tracker