CVE-2026-86551: Exposure of Resource to Wrong Sphere

The Z80Ultra NX741J product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factorymacaddress in the Settings.Secure database...

PT-2026-95897

Name of the Vulnerable Software and Affected Versions Z80Ultra NX741J affected versions not specified Description Non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory mac address in the Settings.Secure database. Recommendations At the moment, there is...

The vulnerability of the fromP2pListFilter (/goform/P2pListFilter) function in the Tenda CX12L Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the fromP2pListFilter /goform/P2pListFilter function in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST request...

kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by sending a specially-crafted malicious Wi-Fi beacon, could exploit a vulnerability in the cfg80211mergeprofile function. This flaw causes the kernel to spend an excessive amount of processing time, leading to a...

PT-2026-94727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7921 Wi-Fi driver where a PCIe Advanced Error Reporting AER error can cause the bus to hang. When this occurs, register reads return 0xFFFFFFFF, which corrupts t...

CVE-2026-86474

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-85628

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585

CVE-2026-86585 affects VEO and VEO-XS Wi-Fi monitors (Fermax) in versions prior to 01.48.001 . The root cause is the lack of signature verification on firmware update packages, allowing an attacker who controls the delivery of an update to install unauthorised firmware on the device. The attack v...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-85628 Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-85628 Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-85628

CVE-2026-85628 affects the DuoxMe application and VEO / VEO-XS Wi-Fi monitors (Fermax). During the pairing process, home Wi-Fi credentials are transmitted in cleartext over Wi-Fi Direct , allowing an attacker on the same Wi-Fi Direct network to intercept the network password. The vulnerability ex...

EUVD-2026-80585

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

CVE-2026-85628: Cleartext Transmission of Sensitive Information

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to interce...

PT-2026-93429

Name of the Vulnerable Software and Affected Versions VEO Wi-Fi monitors versions prior to 01.48.001 VEO-XS Wi-Fi monitors versions prior to 01.48.001 Description The software fails to validate TLS certificates during the firmware update download process. This flaw enables a man-in-the-middle...

PT-2026-93434

Name of the Vulnerable Software and Affected Versions VEO Wi-Fi monitors versions prior to 01.48.001 VEO-XS Wi-Fi monitors versions prior to 01.48.001 Description The software fails to verify the digital signatures of firmware update packages. This allows an attacker who can control the update...

CVE-2026-86474: Improper Certificate Validation

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-86585: Improper Verification of Cryptographic Signature

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...