{"id":"CVE-2026-97358","aliases":[],"cve":{"records":[{"id":"CVE-2026-97358","source":"B.Braun","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-24T13:21:42.792Z","published":"2026-11-13T17:55:24.556Z","modified":"2026-11-13T19:31:51.522Z"}],"publishers":[{"name":"B.Braun","role":"CNA","organizationId":"653264ec-f98b-4e8f-b8b4-540a01b7657d","modified":"2026-11-13T17:55:24.556Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T19:31:51.522Z"}],"references":[{"url":"https://www.bbraun.com/productsecurity","tags":[],"source":"B.Braun"},{"url":"https://https://www.bbraunusa.com/productsecurity","tags":[],"source":"B.Braun"}],"weaknesses":[{"id":"CWE-830","description":"CWE-830\tInclusion of Web Functionality from an Untrusted Source","source":"B.Braun"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T18:31:26.488418Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Inclusion of Web Functionality from an Untrusted Source on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus","titleSource":"B.Braun","descriptionSource":"B.Braun","description":"An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom","score":7,"severity":"high","published":"2026-11-13T17:55:24.556Z","modified":"2026-11-13T19:31:51.522Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"B. Braun Melsungen AG","name":"SpaceCom","platforms":[],"versions":[{"version":"0","status":"affected","lessThanOrEqual":"U/L94","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"B.Braun","url":"https://www.cve.org/CVERecord?id=CVE-2026-97358"}],"remediation":[{"text":"Recommended update to patched versions U/L 96 (SpaceCom).","source":"B.Braun","url":"https://www.cve.org/CVERecord?id=CVE-2026-97358"}],"references":["https://www.bbraun.com/productsecurity","https://https://www.bbraunusa.com/productsecurity"],"sources":[{"name":"CVE","id":"CVE-2026-97358","modified":"2026-11-13T19:31:51.522Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-97358"}],"assessments":[{"source":"B.Braun","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L","score":7}],"sourceAffected":[],"observedAt":"2026-11-13T19:45:30.348Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:10:33.488Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T19:50:33.927Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T19:50:33.927Z","attemptedAt":"2026-11-13T19:50:33.927Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T19:50:31.159Z","attemptedAt":"2026-11-13T19:50:31.159Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T19:50:33.927Z","attemptedAt":"2026-11-13T19:50:33.927Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-125685","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125685","modified":"Nov 13, 2026, 6:32:37 PM","score":7,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L","checkedAt":"2026-11-13T19:50:31.159Z"},{"source":"GitHub Advisory Database","id":"GHSA-7h5v-w8vr-6c3v","url":"https://github.com/advisories/GHSA-7h5v-w8vr-6c3v","modified":"2026-11-13T18:32:44Z","checkedAt":"2026-11-13T19:50:33.927Z"}],"aiSummary":{"text":"B. Braun SpaceCom, version U/L94 or lower, may be affected by inclusion of web functionality from an untrusted source. The impact is uncertain.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T21:46:29.742Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-97358"}]}}