Is CVE-2026-42951 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-42951 being exploited in the wild.

How severe is CVE-2026-42951?

Medium severity, with a CVSS score of 5.4, published 29 May 2026.

Is there a fix for CVE-2026-42951?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-42951 attacked?

It is attacked from the adjacent network, in device firmware.

Am I affected by CVE-2026-42951?

Check whether you run Danelec VDR G4e at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-42951: Danelec MacGregor VDR credential exposure in device backup

CVE-2026-42951 · Severity: medium · CVSS 5.4 · Published 2026-05-29

The Danelec MacGregor Voyage Data Recorder (VDR), a device used on maritime vessels to record data for accident investigation, contains a vulnerability where authenticated users can download system backups. These backups contain sensitive account information and password hashes. If exploited, an attacker with low-level access could obtain credentials to gain full administrative control over the device, potentially compromising the integrity of recorded voyage data.

Technologies: Danelec VDR G4e. Vendors: Danelec.

Quick answers

Is CVE-2026-42951 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-42951 being exploited in the wild.
How severe is CVE-2026-42951?: Medium severity, with a CVSS score of 5.4, published 29 May 2026.
Which products and versions are affected?: Danelec VDR G4e < V5.250.
Is there a fix for CVE-2026-42951?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-42951 attacked?: It is attacked from the adjacent network, in device firmware.
Am I affected by CVE-2026-42951?: Check whether you run Danelec VDR G4e at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Danelec MacGregor Voyage Data Recorder (VDR) G4e suffers from an insufficiently protected credentials vulnerability (CWE-522). An authenticated user with low privileges can trigger a backup download of the device. This backup file contains sensitive configuration data, including user account details and password hashes. Because the attack requires adjacent network access and specific timing or configuration conditions (reflected in the High Attack Complexity), the CVSS score is moderated. Successful exploitation allows an attacker to perform offline brute-force attacks on the hashes to escalate privileges to an administrator level. The vulnerability is resolved in firmware version V5.250.

Affected products

Danelec MacGregor Voyage Data Recorder (VDR) G4e < V5.250

Timeline

2026-05-28: advisory: CISA ICS Advisory ICSA-26-148-01 published
2026-05-29: disclosed: CVE-2026-42951 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.