CVE-2026-112165

The LaserGest mobile application is vulnerable to a man-in-the-middle (MITM) attack because it explicitly disables TLS certificate and hostname verification. The vulnerability is caused by the use of setServerTrustMode("nocheck"), which allows an attacker to intercept or modify network traffic, i...

CVE-2026-112164

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...

CVE-2026-112164

The LaserGest mobile application contains a security flaw where assistance portal credentials are encrypted using a hardcoded AES key and IV . An attacker who gains access to the application package can exploit this root cause to recover the credentials in cleartext . No specific patch version or...

EUVD-2026-120096

The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode"nocheck", allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications...

EUVD-2026-120088

The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext...