OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-86585

HIGH · CVSS 7.7 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability arises from the absence of signature verification for firmware update packages in VEO and VEO-XS Wi-Fi monitors, allowing attackers to install unauthorized firmware if they can intercept the update delivery. This could lead to compromised device functionality, data breaches, or unauthorized access to network resources. Organizations using these devices should prioritize patching to version 01.48.001 or later to mitigate the risk.

CVE
CVE-2026-86585
Severity
HIGH
CVSS
7.7
EPSS
0.16%

Original NVD Description

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.