CVE-2026-42951

Description

An authenticated user can download a backup of the Danelec MacGregor Voyage Data Recorder device which includes account data and password hashes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.danelec.com/contact ↗
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-01 ↗
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-01.json ↗