CVE-2026-97358: Inclusion of Web Functionality from an Untrusted Source on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Braun SpaceComto a version that resolves this vulnerability.Fixed in U/L 96
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates the attack can be performed over the network without prior privileges or user interaction. It also indicates that additional attack requirements are present, although the available information does not specify what those requirements are.
What could a successful exploit affect?
The vulnerability is rated high severity with low impacts to confidentiality, integrity, and availability in the vulnerable component. It also has a high integrity impact on a subsequent system, indicating an attacker may be able to substantially alter data or operations beyond the initially affected component.
Which products are identified as affected?
The affected products named are B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus. The available description specifically states that remote code execution could occur on SpaceCom.