CVE-2026-16731 is a cryptographic timing side-channel vulnerability (CWE-208) in OMICRON StationScout's backend authentication mechanism prior to version 3.05. The vulnerability allows an unauthenticated attacker to exploit observable timing discrepancies to forge valid authentication credentials, bypassing authentication and authorization controls. This enables the attacker to impersonate legitimate clients and gain full access to system configuration, potentially modifying or resetting system parameters and injecting network traffic into the connected network.

An attacker exploiting this vulnerability can gain unauthorized full access to the affected system's configuration. This includes the ability to modify or reset system parameters and inject malicious network traffic, which could disrupt operations or compromise the connected network's integrity. The vulnerability affects the confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor OMICRON electronics GmbH advisories for updates. Until a fix is available, restrict access to the affected system and consider additional network-level protections to limit exposure.