Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2026-8072

Insecure generation of SAT access credentials in Ingecon EMS Board

Critical9.2EPSS 0.15%
Published
Updated
Reserved
Assigned by
INCIBE

Description

Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board. The vulnerability arose because the secret access credentials were not based on a secure cryptographic scheme, but rather on a weak hashing algorithm, which could allow an attacker to carry out a privilege escalation.

Scores

CVSS scores of CVE-2026-8072, by who scored it
Scored byCVSSScoreVector
INCIBECNA (assigner)4.0Critical9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
NVDNVD · Deferred4.0Critical9.2CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
0.15% · top 96% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.2.

Weakness

Affected products

  • Ingeteam · Ingecon Sun EMS Board

    • affected ≤ AAX1055CT
    • affected ≤ ABU1001_P
    • affected ≤ ACL1201_B
    • affected ≤ ACL1200AL
    • affected ≤ ABH1027_K
    • affected ≤ ABH1007_Z
    • affected ≤ ABS1009_L
    • affected ≤ ABS1005_T
    • affected ≤ ACB1005_A
    • affected ≤ AAX1031CN
    • unaffected AAX1055CU
    • unaffected ABU1001_Q
    • unaffected ACL1201_C
    • unaffected ACL1200AM
    • unaffected ABH1027_L
    • unaffected ABH1007AA
    • unaffected ABS1009_P
    • unaffected ABS1005_U
    • unaffected ACB1005_C
    • unaffected AAX1031CO

What to do

Solution: The risk has been mitigated with the release of a patch applicable to all versions, developed in December 2025. It is recommended that users update to the newer versions.

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-8072 badge
[![CVE-2026-8072](https://trackcve.app/badge/CVE-2026-8072.svg)](https://trackcve.app/cve/CVE-2026-8072)

Record last updated .