CVE-2026-2417 — Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

CVE-2026-2417

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller PUBLISHED

Description (CNA)

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges.

Affected (CNA)

Vendor / product	Versions
Pharos Controls / Mosaic Show Controller	affected 2.15.3

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-083-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.