CVE-2026-118682

The KaringX ClashMi application (versions through 1.0.32.1801 ) is vulnerable to a Man-in-the-Middle (MITM) attack because the HttpUtils helper disables TLS certificate validation by default. This flaw allows an attacker controlling a proxy node to intercept HTTPS traffic using any certificate. B...