PT-2026-117334

CVE-2026-112105

Published

2026-10-19

Updated

2026-10-19

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions GlitterWare Passy versions prior to 1.10.2

Description An issue exists in the TLS Handler component within the lib/main.dart library. Specifically, the MyHttpOverrides() function allows for improper certificate validation, which could be exploited remotely. This attack is characterized by high complexity and is difficult to execute.

Recommendations Upgrade to version 1.10.2.

Exploitability

Exploit

Fix

Impacts

Researchers

Siyang Wu

Vendors

Affected products

Weakness enumeration

CWE-287: Improper Authentication

CWE-295: Improper Certificate Validation