Insecure Credential Generation in Ingecon Sun EMS Board by Ingeteam
CVE-2026-8072

9.2CRITICAL

Key Information:

Vendor

Ingeteam

Vendor
CVE Published:
12 May 2026

What is CVE-2026-8072?

The Ingecon Sun EMS Board features a vulnerability in its Technical Support access functionality, where secret access credentials are generated using a weak hashing algorithm. This insecure method can potentially allow unauthorized users to escalate their privileges, posing significant cybersecurity risks. It is essential for users and organizations to be aware of this vulnerability and apply relevant patches to secure their devices against potential exploitation.

Affected Version(s)

Ingecon Sun EMS Board 0

Ingecon Sun EMS Board 0

Ingecon Sun EMS Board 0

References

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rubén Santamarta
.