CVE-2026-78225: Wärtsilä Fos-Onboard

Critical severity, CVSS 9.0. EPSS: 0.5% chance of exploitation in the next 30 days.

A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.

Affected products

• Wärtsilä Fos-Onboard: version 5.07.0923.01 only

Published 2026-09-15. Last modified 2026-09-24.