Vulnerabilities

TI-2026-02050 CVE-2026-2417 · GHSA-g4m3-7qqq-fgp4

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

MEDIUM 49

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary comman…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00595 Published 2026-03-24 No fix listed CWE-306

TI-2018-09291 CVE-2018-12926 · GHSA-5hph-m865-gr74

Pharos Controls devices allow remote attackers to obtain potentially sensitive…

LOW 36

Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01346 Published 2018-06-28 No fix listed CWE-200

Vulnerabilities

Filters

Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

Pharos Controls devices allow remote attackers to obtain potentially sensitive…