CVE-2026-81855

A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. The key is embedded in the software and cannot be changed by administrators.

Anyone who knows the embedded key can impersonate a legitimate client and gain unauthorized access to protected resources. This may lead to a breach of confidentiality and integrity of the system.

Apply the vendor patch that removes the hardcoded key or allows it to be rotated as soon as possible. Until patched, restrict network access to the robot testing framework component.