Skip to content
ThreatCluster

Critical Vulnerabilities Found in Wärtsilä FOS Software

First seen 28 Sep 2026, 23:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 23:06 UTC
  • •Critical vulnerabilities in Wärtsilä's FOS software could allow remote exploitation.
  • •CVE-2026-78225 and CVE-2026-81855 have CVSS v4 scores of 9.5 and 9.3.
  • •Wärtsilä has developed a security patch, which is now available to users.

Cydome's maritime cyber research team has discovered critical vulnerabilities in Wärtsilä's FOS-Onboard software (version 5.07.0923.01), which is widely used in maritime operations. The vulnerabilities, identified as CVE-2026-78225 and CVE-2026-81855, have CVSS v4 scores of 9.5 and 9.3, respectively. They involve a hard-coded cryptographic key that could allow unauthorized remote users to deliver malicious updates, execute code, or impersonate privileged clients. This could lead to significant operational risks, including manipulation of vessel performance data and potential safety hazards. Wärtsilä has confirmed the development of a security patch for affected users. CISA published an advisory (ICSA-26-258-02) regarding these vulnerabilities on September 28, 2026. The maritime industry, despite its critical role in global trade, has seen limited cybersecurity research, making these findings particularly alarming.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 3h ago How this analysis works

Timeline

2026-09-15
CVE-2026-78225 and CVE-2026-81855 published
Cydome identified critical vulnerabilities in Wärtsilä's FOS software, leading to high CVSS scores.
Einnews
2026-09-28
CISA publishes advisory ICSA-26-258-02
CISA issued an advisory regarding the critical vulnerabilities found in Wärtsilä's FOS software.
Hellenicshippingnews

More articles in this cluster (5)

Following this threat?

Track Wärtsilä and CVE-2026-78225 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3