CVE-2026-2417

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

CVSS 9.3 critical · Pharos Controls Mosaic Show Controller · published 2026-03-24

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges.

NVD · CVE.org

Coverage 1 source

1. 2026-03-24 CISA Cybersecurity Advisories critical Pharos Controls Mosaic Show Controller

   Pharos Controls Mosaic Show Controller has a vulnerability allowing unauthenticated attackers to execute arbitrary commands with root privileges.

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28