CVE-2026-67578 describes a missing authentication vulnerability in all versions of the FURUNO ELECTRIC CO., LTD. FA-50 product. An attacker who can access the internal network of the vessel can alter configuration parameters by manipulating the product's settings screen. This vulnerability does not require privileges or user interaction and has a CVSS 3.1 base score of 7.5, reflecting a high severity impact on integrity but no confidentiality or availability impact. No patch or official remediation information is currently available, and no known exploits are reported in the wild.

An attacker with internal network access can modify critical configuration settings of the FA-50 device, potentially compromising the integrity of the system's operation. There is no impact on confidentiality or availability according to the CVSS vector. The lack of authentication for critical functions increases the risk of unauthorized configuration changes.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vessel's internal network to trusted personnel only and monitor for unauthorized access attempts. No vendor advisory or patch information is currently provided.