CVE-2026-46459 is a missing authentication vulnerability in ICU Scandinavia Boomerang's device receiver endpoints. This allows unauthenticated remote attackers to read full facility configurations and write unauthorized data to the sensor database. The issue was fixed in version 2.4.18.029. Defenders of ICS environments using ICU Scandinavia Boomerang should assess exposure and apply the fix to prevent un [truncated]
CVE-2026-46458 is an information disclosure vulnerability in ICU Scandinavia Boomerang, where sensitive credential files are exposed via static HTTP, allowing an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials. This issue has been fixed in version 2.4.18.029. Defenders should assess exposure and prioritize remediation, focusing on internet-exposed systems. The vu [truncated]
