OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-85628

HIGH · CVSS 7 EPSS 0.09%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The DuoxMe application and VEO/VEO-XS Wi-Fi monitors prior to specified versions transmit home Wi-Fi credentials unencrypted during the pairing process, making them susceptible to interception by attackers on the same Wi-Fi Direct network. This vulnerability can lead to unauthorized access to the home network, compromising security and privacy. Users of these devices should prioritize updating to the latest versions to mitigate this risk.

CVE
CVE-2026-85628
Severity
HIGH
CVSS
7
EPSS
0.09%

Original NVD Description

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.