CVE-2026-97357: Out-of-bounds write on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

Published Nov 13, 2026

Updated

An Out-Of-Bounds Write due to missing input validation is possible in the autoprogramming interface of SpaceCom and Space Battery pack with WiFi which could lead to a denial of service of the affected communication device.

Affected Software

3 affected components

B. Braun SpaceCom

B. Braun Battery Pack SP with Wi-Fi

B. Braun Data module compactplus

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Braun Battery Pack SP with Wi-Fi to a version that resolves this vulnerability.
Fixed in U/L 95
Upgrade
Upgrade Braun SpaceCom to a version that resolves this vulnerability.
Fixed in U/L 96

Event History

Nov 13, 2026

CVE Published

via MITRE·05:54 PM

Data Sourced

via MITRE·05:54 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is network-accessible and does not require privileges or user interaction. Exploitation targets the affected device's autoprogramming interface.

What is the expected impact of successful exploitation?

Successful exploitation could cause a denial of service affecting the communication device. The supplied severity vector indicates low impacts to integrity and availability, with no confidentiality impact.