Vulnerability Description
NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can extract credentials to bypass the intended transfer workflow. Successful authentication against the SOAP interface grants access to privileged WCF methods, enabling an attacker to write or overwrite files within application-defined paths.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Navtor | Navbox Firmware | <= 4.16.1.20 |
| Navtor | Navbox | - |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-15Third Party Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-155-01MitigationUS Government Resource
FAQ
What is CVE-2026-21404?
CVE-2026-21404 is a vulnerability with a CVSS score of 6.3 (MEDIUM). NAVTOR NavBox through version 4.16.1.20 contains hard-coded credentials within its Windows Communication Foundation (SOAP) implementation. If the SOAP functionality is enabled, a local attacker can ex...
How severe is CVE-2026-21404?
CVE-2026-21404 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-21404?
Check the references section above for vendor advisories and patch information. Affected products include: Navtor Navbox Firmware, Navtor Navbox.