CVE-2026-13743 LOW

CVE-2026-13743: Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel

Vendor Cubespace
Product CW0057 Reaction Wheel
Weakness CWE-347
Published July 2, 2026
Last update July 2, 2026
View on NVD All CVEs

CVSS base score

3.3/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.

Key dates

02Disclosure timeline

July 2, 2026 CVE published
July 2, 2026 Record updated