CVE-2026-16731: Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout
OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters or injecting network traffic into the connected network.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OMICRON StationScoutto a version that resolves this vulnerability.Fixed in 3.05
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16731?
CVE-2026-16731 has a risk score of 77, indicating a high severity level.
How do I fix CVE-2026-16731?
To fix CVE-2026-16731, upgrade OMICRON StationScout to version 3.05 or later as it contains the necessary security patches.
What type of attack does CVE-2026-16731 involve?
CVE-2026-16731 involves a cryptographic timing side-channel attack that can lead to authentication and authorization bypass.
Who is affected by CVE-2026-16731?
CVE-2026-16731 affects users of OMICRON StationScout versions prior to 3.05.
Can CVE-2026-16731 be exploited remotely?
Yes, CVE-2026-16731 can be exploited by an unauthenticated attacker remotely to forge valid authentication credentials.