What is CVE-2026-5846?

CVE-2026-5846 is a medium-severity vulnerability in Watchfire Bc550, classified under Use of Hard-coded Cryptographic Key. CVSS score: 5.7/10. Published 2026-07-30.

How severe is CVE-2026-5846?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Watchfire Bc550

CVE-2026-5846

The affected Watchfire Controller Software contains self-signed hard-coded RSA private keys and corresponding X.509 certificates used for authenticating and encrypting HTTPS/TLS connections to the controller's built-in web management inter…

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N.

Affected products

Watchfire Bc550 — versions 12.30, 12.31 SP1
Watchfire Bc750 — versions 11.33, 11.34, 12.35
Watchfire Bc760 — versions 12.38, 12.41 SP1, 13.00
Watchfire Bc760dc — versions 12.39, 12.41 SP1

Weakness classification (CWE)

CWE-321 — Use of Hard-coded Cryptographic Key

References

ics-cert@hq.dhs.gov (government-resource)
ics-cert@hq.dhs.gov

Frequently asked questions

What is CVE-2026-5846?: CVE-2026-5846 is a medium-severity vulnerability in Watchfire Bc550, classified under Use of Hard-coded Cryptographic Key. CVSS score: 5.7/10. Published 2026-07-30.
How severe is CVE-2026-5846?: Medium severity. CVSS v3 base score is 5.7 out of 10.