CVE-2026-86474
Improper Certificate Validation in the Firmware Download vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
| CWE | CWE-295 |
| Vendor | fermax electronica s.a.u. |
| Product | duox plus monitor firmware (veo wi-fi range) |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for fermax electronica s.a.u. duox plus monitor firmware (veo wi-fi range)
Be the first to know when new unknown vulnerabilities affecting fermax electronica s.a.u. duox plus monitor firmware (veo wi-fi range) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Fermax Electronica S.A.U. / DUOX PLUS monitor firmware (VEO Wi-Fi range)
0 < 01.48.001
Credits
Pedro J. Núñez-Cacho Fuentes (Tunelko) INCIBE-CERT