{"affected":[{"defaultStatus":"unaffected","product":"SpaceCom","source":"CNA: B.Braun","vendor":"B. Braun Melsungen AG","versions":[{"lessThanOrEqual":"U/L94","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-97358","cwes":["CWE-830"],"description":"An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceCom","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7,"severity":"high","source":"CNA: B.Braun","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:L","version":"4.0"}],"modifiedAt":1794598311522,"publishedAt":1794592524556,"references":[{"source":"CNA: B.Braun","tags":[],"url":"https://www.bbraun.com/productsecurity"},{"source":"CNA: B.Braun","tags":[],"url":"https://https//www.bbraunusa.com/productsecurity"}],"remediation":[{"kind":"fix","source":"CNA: B.Braun","text":"Recommended update to patched versions U/L 96 (SpaceCom)."}],"revision":"ace17741c08a3290f024ac4a8f0318e008ca12c4b4424f10e26ccba7b114615a","sources":[{"modifiedAt":1794598311522,"name":"CNA: B.Braun","retrievedAt":1794600625855,"url":"https://www.cve.org/CVERecord?id=CVE-2026-97358"}],"ssvc":{"assessedAt":1794594686488,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Inclusion of Web Functionality from an Untrusted Source on B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus","updatedAt":1794600625855}