Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-86474

Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Fermax
Products
Duox Plus Monitor Firmware (veo Wi-fi Range)
CVE-2026-86585

Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Fermax
Products
Duox Plus Monitor Firmware (veo Wi-fi Range)