Medium severity5.7NVD Advisory· Published May 29, 2026· Updated Jun 3, 2026
CVE-2026-40425
CVE-2026-40425
Description
The administrator account for the
Danelec MacGregor Voyage Data Recorder web interface can directly edit sensitive files related to authentication, potentially changing the root password.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- www.cisa.gov/news-events/ics-advisories/icsa-26-148-01nvdUS Government ResourceThird Party Advisory
- github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-01.jsonnvdIssue Tracking
- www.danelec.com/contactnvdProduct
News mentions
2- CISA CSAF Batch: Nine ICS Vulnerabilities Spanning Maritime, Medical, and Surveillance GearVypr Intelligence · May 29, 2026
- MacGregor Voyage Data Recorder (VDR) G4eCISA ICS Advisories