Pharos Controls vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Pharos Controls products: 1 record(s), with severity, exploitation and fixes.

Mosaic Show Controller 1

Exploited only (KEV) →

CVE-2026-2417 Critical · 9.3 CWE-306 Mar 24, 2026

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges.