Hard-coded Credentials in KS-SOMED Allow Unauthorized Access to FTP Server

CVE-2026-42251

What is CVE-2026-42251?

The KS-SOMED application contains hard-coded credentials that can grant unauthorized access to an FTP server responsible for hosting its update packages. An attacker leveraging these credentials may upload a malicious update file, which could subsequently be distributed and installed on client machines as though it were a legitimate update. Corrective actions include removing hard-coded credentials and enhancing the update process, along with restricting previously compromised access to a read-only state.

References