CVE-2026-86474 — Improper Certificate Validation in the Firmware Download vulnerability
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-t…
Published: 2026-09-16 · CVSS: 7.7 · CVSS 4.0
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7