CVE-2026-86474

— UNSCORED

Published 2026-09-16 · Updated 2026-09-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

Weaknesses

CWE-295

References

https://fermax.com/security-advisories

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.