VULNERABILITY INTELLIGENCE

CVE-2025-68273

CVSS score5.3 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2026-01-01
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Signal K Server is a server application that runs on a central hub in a boat. An unauthenticated information disclosure vulnerability in versions prior to 2.19.0 allows any user to retrieve sensitive system information, including the full SignalK data schema, connected serial devices, and installed analyzer tools. This exposure facilitates reconnaissance for further attacks. Version 2.19.0 patches the issue.

Weakness classification

  • security-advisories@github.com: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references