CVE-2026-46459

Vulnerability Description

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database.
This issue has been fixed in version 2.4.18.029

Vulnerability Details

Published Date

July 15, 2026

Last Modified

July 15, 2026

CWE ID

CWE-862

Source

NVD

Vendor

ICU Scandinavia

Product

Boomerang

External References

https://cert.pl/posts/2026/07/CVE-2026-46458
https://icuscandinavia.se/boomerang-quality-assurance-lab/

CVE-2026-46459

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment