OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-86474

HIGH · CVSS 7.7 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

VEO and VEO-XS Wi-Fi monitors prior to version 01.48.001 are vulnerable due to inadequate TLS certificate validation during firmware updates, enabling attackers to execute man-in-the-middle attacks. This flaw poses a significant risk as it could allow unauthorized firmware modifications, potentially compromising device integrity and security. Organizations utilizing these devices should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-86474
Severity
HIGH
CVSS
7.7
EPSS
0.13%

Original NVD Description

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.