Vulnerability in Fermax Electronica S.a.u. Duox Plus Monitor Firmware (Veo Wi-Fi Range)
CVE-2026-86474
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
Vulnerability class: Improper Certificate Validation
Affected products
Weakness classification (CWE)
References
- 539080bd-5750-4cce-b30b-eed9a4ef6dcc (vendor-advisory)