Weakness in Watchfire Controller Software Allows Unauthorized Access

CVE-2026-5846

What is CVE-2026-5846?

The Watchfire Controller Software is susceptible to a vulnerability stemming from the usage of hard-coded self-signed RSA private keys and X.509 certificates. These cryptographic elements are employed for authenticating and securing HTTPS/TLS connections to the software’s web management interface. The embedded keys, stored in plaintext within application binaries, pose a significant risk as they may allow unauthorized access to sensitive operations, potentially compromising system integrity and security.

References