CVE-2026-85628

UNKNOWN

Description

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.

Timeline

Published:September 16th, 2026 10:16 AM

Last modified:September 18th, 2026 7:44 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-319

References & Reports

Advisories, patches, and third-party reports

https://fermax.com/security-advisories

Source: NIST NVD · Data may lag official sources by up to one minute