A CISA advisory on CubeSpace’s CW0057 reaction wheel spotlights a narrow but serious firmware-authenticity flaw: physical access, not the internet, is the gate to the risky path.