CVE-2026-16315 HIGH

CVE-2026-16315: Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard

Vendor Omicron Electronics Gmbh
Product OMICRON StationGuard
Weakness CWE-208
Published August 6, 2026
Last update August 6, 2026

CVSS base score

8.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U

What the vulnerability does

01Description

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

Key dates

02Disclosure timeline

August 6, 2026 CVE published
August 6, 2026 Record updated