Dashboard / CVE-2026-46459

CVE-2026-46459

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 56/100
Published: 2026-07-15 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: None

Description

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

56 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.43%
Raw Score 0.004330
Percentile 37.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00433
2026-10-28
0.00433

Intelligence Sources

nvd ref →

External Links