CVE-2026-121624
Medium · 6.8CVSS
6.8
EPSS
0.1%
Published
Nov 3, 2026
CISA due date
—
The record
Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent attackers to intercept TLS connections by presenting untrusted certificates. Attackers on the same network can terminate and relay the client's TLS session using self-signed certificates to read usernames, SHA-256 password hashes, and license codes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121565 Tanium addressed an improper certificate validation vulnerability in multiple products. CWE-295
- CVE-2026-115714 Improper Certificate Validation (CWE-295) in the operating system certificate bundle… CWE-295
- CVE-2026-121452 bbs-go through 4.4.6 contains an improper certificate validation vulnerability that… CWE-295
- CVE-2026-121392 FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in… CWE-295
- CVE-2026-91897 Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper… CWE-295
- CVE-2026-120250 OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation… CWE-295
- CVE-2026-118147 Improper certificate validation in Visual Studio allows an unauthorized attacker to… CWE-295
- CVE-2026-117681 A flaw was found in konflux-ci. CWE-295