CVE-2026-3822
Taipower｜Taipower APP(Android) - Improper Certificate Validation
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets.
| CWE | CWE-295 |
| Vendor | taipower |
| Product | taipower app |
| Published | Mar 9, 2026 |
| Last Updated | Mar 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for taipower taipower app
Be the first to know when new medium vulnerabilities affecting taipower taipower app are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
Taipower / Taipower APP
0 ≤ 3.4.4