Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-2417

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pharos Controls Mosaic Show Controller

Default version status: unaffected

  • 2.15.3affected

References