CVE-2026-16731 HIGH

CVE-2026-16731: Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout

Vendor Omicron Electronics Gmbh
Product OMICRON StationScout
Weakness CWE-208
Published August 6, 2026
Last update August 6, 2026

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:U/S:P

What the vulnerability does

01Description

OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters or injecting network traffic into the connected network.

Key dates

02Disclosure timeline

August 6, 2026 CVE published
August 6, 2026 Record updated