CVE-2024-54855: Fabricators Vanilla OS Core Image

Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days.

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts.

Affected products

• Fabricators Vanilla OS Core Image: before 1.1.1 (fixed in 1.1.1)

Published 2026-01-13. Last modified 2026-07-05.