CVE-2026-42929 identifies a vulnerability in the Danelec MacGregor Voyage Data Recorder (VDR) G4e where default accounts use hard-coded credentials. This flaw enables attackers to gain unauthorized access remotely with low attack complexity and no required privileges or user interaction. The vulnerability impacts confidentiality and integrity substantially, with limited availability impact. No patch or official remediation level has been disclosed, and the product is not a cloud service, so remediation depends on vendor updates or mitigations.

Exploitation of this vulnerability could lead to unauthorized access to the VDR system, potentially compromising sensitive voyage data and system integrity. The high CVSS score indicates a serious risk to confidentiality and integrity, though availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected device and changing default credentials if possible. Monitor vendor communications for updates on patches or mitigations.