PT-2026-140388

CVE-2026-118791

·

Published

2026-11-09

·

Updated

2026-11-09

Description by

CVSS 4.0
7.2
High
MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-494: Download of Code Without Integrity Check
Related identifiers
CVE-2026-118791
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com