cybersecurity
NAVTOR NavBox
Source:
cisa.gov 1 min read
Share
You are reading a summary. The full content is hosted on cisa.gov.
CVE-2026-21404 in NAVTOR NavBox through 4.16.1.20 uses hard-coded credentials in its WCF SOAP feature, letting a local attacker extract credentials, access privileged SOAP methods, and write or overwrite files in application paths. NAVTOR patched the issue in 4.17.2.6 and later, released in April 2026.
Read the full article on the original website
External link to cisa.gov