This vulnerability (CVE-2026-78225) is classified as CWE-321, indicating the presence of a hardcoded cryptographic key within the deployer-ng Update Controller component of Wärtsilä FOS-Onboard software version 5.07.0923.01. Hardcoded keys can be extracted by attackers, enabling unauthorized access or manipulation of cryptographic operations. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) reflects network attack vector, high attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability with scope change. No official patch or vendor advisory is available to confirm remediation status.

Successful exploitation of this vulnerability could lead to full compromise of the affected system's confidentiality, integrity, and availability. Attackers may leverage the hardcoded cryptographic key to decrypt sensitive data, impersonate the server, or disrupt system operations. Given the critical CVSS score and the nature of the flaw, the impact is severe on the affected version 5.07.0923.01 of Wärtsilä FOS-Onboard.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the deployer-ng Update Controller component and monitor for suspicious activity related to cryptographic operations. Avoid deploying the affected version in sensitive environments if possible.