https://vulnogram.org/ Most recent CVEs assigned by Fermax Technologies SLU (fermax). https://vulnogram.org/seaview/icons/fermax.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-86585 https://vulnogram.org/CVE-2026-86585 The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware. High Wed, 16 Sep 2026 10:13:22 GMT https://vulnogram.org/CVE-2026-86474 https://vulnogram.org/CVE-2026-86474 The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel. High Wed, 16 Sep 2026 10:02:09 GMT https://vulnogram.org/CVE-2026-85628 https://vulnogram.org/CVE-2026-85628 Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an… High Wed, 16 Sep 2026 09:36:34 GMT https://vulnogram.org/CVE-2026-86443 https://vulnogram.org/CVE-2026-86443 Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device to retrieve the credentials stored by the application and impersonate the user account. Medium Wed, 16 Sep 2026 09:12:29 GMT https://vulnogram.org/CVE-2025-10971 https://vulnogram.org/CVE-2025-10971 Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2.2.5. High Tue, 02 Dec 2025 07:55:06 GMT