CVE-2026-112165

UNKNOWN 0.0

Disabled TLS Certificate Validation Enables MITM Attacks

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications.

CWE	CWE-295
Vendor	laservideo
Product	lasergest
Published	Nov 9, 2026
Last Updated	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for laservideo lasergest

Be the first to know when new unknown vulnerabilities affecting laservideo lasergest are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

laservideo / lasergest

1.0.18

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112165.md

Credits

Liviero Marco CSIRT-IT