PT-2026-44925 · Danelec Macgregor · Voyage Data Recorder

Andrew Tierney · Published 2026-05-29 · Updated 2026-06-03 · CVE-2026-40425

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Danelec MacGregor Voyage Data Recorder (affected versions not specified)

Description The administrator account for the web interface allows direct editing of sensitive authentication files, which could enable an unauthorized change of the root password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2026-40425

Affected Products

Voyage Data Recorder

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-40425 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-01.json · Note
• https://t.me/cveNotify/165882 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-148-01 · Note
• https://twitter.com/CVEnew/status/2060470700788326623 · Twitter Post
• https://danelec.com/contact · Note