CVE-2026-86474

Vulnerability Description

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

Related Weaknesses (CWE)

CWE-295

References

https://fermax.com/security-advisories

FAQ

What is CVE-2026-86474?

CVE-2026-86474 is a documented vulnerability. The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on th...

How severe is CVE-2026-86474?

CVSS scoring is not yet available for CVE-2026-86474. Check NVD for updates.

Is there a patch for CVE-2026-86474?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.