CVE-2026-5846 in Controller Softwareinformación

Resumen

por MITRE • 2026-07-31

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management interface. These keys are embedded in plaintext within the application patch binaries in the firmware directly from Watchfire's Remote Support filestore.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Icscert

Reservar

2026-04-08

Divulgación

2026-07-31

Moderación

aceptado

Artículo

VDB-384956

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Interested in the pricing of exploits?

See the underground prices here!