What is GHSA-jm44-25h7-5782?

GHSA-jm44-25h7-5782 is a security advisory published by GitHub Security Advisories with Medium severity. ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver...

Which CVE IDs does GHSA-jm44-25h7-5782 cover?

GHSA-jm44-25h7-5782 covers the following CVE IDs: CVE-2026-46459. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-jm44-25h7-5782Medium

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver...

Vendor

GitHub Security Advisories

Published

July 15, 2026

Last Modified

July 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-46459 →

📋 Description

ICU Scandinavia Boomerang is vulnerable to a missing authentication flaw in its device receiver endpoints. This allows an unauthenticated remote attacker to read full facility configurations and write unauthorized data to the sensor database. This issue has been fixed in version 2.4.18.029

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-46459
https://cert.pl/posts/2026/07/CVE-2026-46458
https://icuscandinavia.se/boomerang-quality-assurance-lab
https://github.com/advisories/GHSA-jm44-25h7-5782