VULNERABILITY INTELLIGENCE
CVE-2026-46459
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-07-15
Last modified2026-10-24
Description
ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029
Weakness classification
- cvd@cert.pl: CWE-862