Vulnerability in Latvijas Valsts Radio Un Televīzijas Centrs (Lvrtc) Eparakstītājs 3.0
CVE-2026-0392
eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch the application fetches an update descriptor (XML) over TLS bu…
Vulnerability class: Improper Certificate Validation
Affected products
Weakness classification (CWE)
References
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (permissions-required, government-resource, third-party-advisory)
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158 (release-notes, vendor-advisory)