What is GHSA-hmx6-cprg-h49v?

GHSA-hmx6-cprg-h49v is a security advisory published by GitHub Security Advisories with Low severity. CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper...

Which CVE IDs does GHSA-hmx6-cprg-h49v cover?

GHSA-hmx6-cprg-h49v covers the following CVE IDs: CVE-2026-13743. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hmx6-cprg-h49vLow

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper...

Vendor

GitHub Security Advisories

Published

July 2, 2026

Last Modified

July 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-13743 →

📋 Description

CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20 are vulnerable to an Improper Verification of Cryptographic Signature vulnerability. This could allow an attacker with physical access to the product to upload arbitrary malicious firmware to the device without authentication.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13743
https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-02
https://github.com/advisories/GHSA-hmx6-cprg-h49v