NAVTOR confirms NavBox patch programme after Cydome finds security vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NAVTOR Addresses Security Flaws in NavBox Devices Following Cydome's Findings Cydome Research has identified multiple security vulnerabilities in NAVTOR's NavBox devices, specifically CVE-2026-2752 and CVE-2026-2754. These vulnerabilities could potentially allow unauthorized access to sensitive vessel data. In response, NAVTOR has initiated a comprehensive patching program to remediate these issues, with updates released in November 2025. The vulnerabilities affect the NavBox vessel data gateway, which is critical for maritime operations. NAVTOR confirmed that the patches are now available and encouraged users to update their systems. The vulnerabilities were disclosed on March 10, 2026, prompting immediate action from NAVTOR. The situation highlights the ongoing need for vigilance in maritime cybersecurity. 3 sources 61