CVE-2026-113618 Improper Server Certificate Validation in ZSIRep Client Library

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

CVE-2026-113618

The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation due to a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This flaw allows a man-in-the-middle attacker to impersonate the ZSIRep server and int...