CVE-2026-86474

UNKNOWN

Description

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

Timeline

Published:September 16th, 2026 10:16 AM

Last modified:September 18th, 2026 7:44 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-295

References & Reports

Advisories, patches, and third-party reports

https://fermax.com/security-advisories

Source: NIST NVD · Data may lag official sources by up to one minute