Cryptographic Timing Side-Channel Vulnerability in OMICRON StationScout

CVE-2026-16731

What is CVE-2026-16731?

OMICRON StationScout versions prior to 3.05 contain a significant cryptographic timing side-channel vulnerability that affects the backend authentication mechanism. This flaw potentially enables an unauthenticated attacker to forge valid authentication credentials, thus bypassing both authentication and authorization processes. By exploiting this vulnerability, an attacker can impersonate legitimate clients, gaining unauthorized full access to system configurations. This access allows for the modification, reset, or unauthorized alteration of system parameters and can lead to the injection of malicious network traffic into the connected network, posing severe security risks.

References