Navtor Navbox Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Navtor Navbox Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-2753 — CVSS 7.5 (high): An Absolute Path Traversal vulnerability exists in Navtor NavBox. The application exposes an HTTP service that fails to properly sanitize…
• CVE-2026-2754 — CVSS 7.5 (high): Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints. An unauthenticated…
• CVE-2026-2752 — CVSS 5.3 (medium): Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to…