Vulnerability · Published Aug 6, 2026 · Assigned by OMICRON

CVE-2026-16731Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout

High 8.3

In plain English

A high-severity security flaw in OMICRON StationScout from OMICRON electronics GmbH. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 4.0)8.3High

Exploit odds (30 days)0.4%top 61.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters or injecting network traffic into the connected network.

Affected products (as reported)

Vendor	Product	Versions
OMICRON electronics GmbH	OMICRON StationScout	0 – before 3.05

Weakness: CWE-208 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:U/S:P

References

https://www.omicronenergy.com/.well-known/csaf/osa-21.json vendor-advisory