CVE-2026-86474
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.
- Published Sep 16, 2026
- CVSS 7.7 high
- 0.1% chance of exploitation in the next 30 days (EPSS)
- A fix is available