PT-2026-1022 · Unknown · Signal K Server

Published 2026-01-01 · Updated 2026-01-02 · CVE-2025-68273

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Signal K Server versions prior to 2.19.0

Description Signal K Server, a server application used on boats, has an information disclosure issue. An unauthenticated user can access sensitive system information. This includes the complete SignalK data schema, details of connected serial devices, and installed analyzer tools. This exposure could be used to gather information for potential further attacks.

Recommendations Update to version 2.19.0 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-68273

GHSA-FPF5-W967-RR2M

Affected Products

Signal K Server

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68273.json · Exploit
• https://github.com/SignalK/signalk-server/security/advisories/GHSA-fpf5-w967-rr2m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68273 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fpf5-w967-rr2m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68273 · Security Note
• https://github.com/SignalK/signalk-server · Note
• https://github.com/SignalK/signalk-server/releases/tag/v2.19.0 · Note
• https://github.com/SignalK/signalk-server/commit/ead2a03d8994969cafcca0320abee16f0e66e7a9 · Note
• https://t.me/cveNotify/147454 · Telegram Post
• https://twitter.com/CVEnew/status/2006861495225700558 · Twitter Post
• https://t.me/CVEtracker/41192 · Telegram Post