Vulnerabilities in NAVTOR

4 results

Vexday analysis

Navtor apresenta footprint reduzido com apenas 1 CVE registrada, sem exploração ativa confirmada (KEV), mas a vulnerabilidade foi divulgada recentemente (últimos 90 dias) e envolve credenciais hardcoded (CWE-798), exigindo monitoramento contínuo apesar do baixo volume.

CVE-2026-2754HIGHNavtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated rEPSS 0.5%CVE-2026-2753HIGHAn Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize usEPSS 0.5%CVE-2026-2752MEDIUMNavtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to EPSS 0.3%CVE-2026-21404MEDIUMNAVTOR NavBox Use of Hard-coded CredentialsEPSS 0.1%