CVE-2026-46459 — Missing Authorization in ICU Scandinavia Boomerang
ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility c…
Published: 2026-07-15 · CVSS: 5.3 · CVSS 4.0
ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7