Vulnerabilities
CVE-2025-66398 - Signal K Server has Unauthenticated State Pollution leading to Remote Code Execu...
CVE ID : CVE-2025-66398 Published : Jan. 1, 2026, 6:15 p.m. | 1 hour, 25 minutes ago Description : Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint. This allows the attacker to hijack the administrator's
CVE Details
CVE ID
Published
Jan. 1, 2026
Source: Telegram CVE Monitor