CVE-2026-40425: Macgregor Interschalt Vdr g4e Firmware

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The administrator account for the Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.

Affected products

• Macgregor Interschalt Vdr g4e Firmware: before 5.250 (fixed in 5.250)

Published 2026-05-29. Last modified 2026-07-20.