Lucene search
+L

4 matches found

NVD
NVD
•added 2026/11/06 3:17 p.m.•2 views

CVE-2026-113618

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

5.3CVSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/06 2:13 p.m.•8 views

CVE-2026-113618 Improper Server Certificate Validation in ZSIRep Client Library

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

5.3CVSS
SaveExploits0References2
CVE
CVE
•added 2026/11/06 2:13 p.m.•5 views

CVE-2026-113618

The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation due to a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This flaw allows a man-in-the-middle attacker to impersonate the ZSIRep server and int...

5.3CVSS6AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/06 12:00 a.m.•2 views

CVE-2026-113618: KAMSOFT ZSIRep Client Library: The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

5.3CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder