FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number.

CVE-2026-59769 affects the Furuno FA-50 AIS transponder device, which contains hard-coded credentials in all versions. An attacker who knows these credentials and has access to the vessel's internal network can exploit them to access the settings screen. Through this access, the attacker can alter the vessel's identification number, posing a significant maritime safety and security risk. The vulnerability is classified under hard-coded credential weaknesses, a common but serious security flaw. No patch version is specified, suggesting all current firmware versions are affected. The issue was disclosed via JVN (Japan Vulnerability Notes) and Furuno's official security notices. This vulnerability is particularly concerning in maritime contexts where vessel identification integrity is critical for navigation safety and regulatory compliance.