CVE-2026-44611 identifies a vulnerability in the Danelec MacGregor VDR G4e where passwords are hashed using a method that restricts password length and does not apply sufficient computational effort, making brute force attacks feasible. The CVSS vector indicates the attack requires adjacent network access, high attack complexity, low privileges, and no user interaction, with high confidentiality impact and low integrity impact. No patch or official remediation has been published, and the device is not a cloud service, so remediation depends on vendor updates or configuration changes.

An attacker with adjacent network access and low privileges could exploit this vulnerability to recover passwords due to weak hashing, compromising the confidentiality of stored credentials. This could lead to unauthorized access or further attacks on the device or network. Integrity and availability impacts are low or none. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit network access to the device to trusted users and networks to reduce exposure. Monitor for vendor updates addressing this vulnerability.