CVE-2026-112170
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
CVSS
—
Sin CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 9 nov 2026 · Última mod.: 9 nov 2026 · CWE-306 · CWE-427 · CWE-494
Sin historial EPSS suficiente todavía.
The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-118791——
———The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.2hCVE-2026-118462——
———Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.3hCVE-2026-118461——
———The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials.3hCVE-2026-118450——
———Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files.3hCVE-2026-68982——
———Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. Anyone able to write to the Celery broker could enqueue a forged callback and execute arbitrary code on every CeleryExecutor worker, without Airflow credentials. Deployments using the CeleryExecutor are affected.
Users are advised to upgrade to apache-airflow 3.4.0 or later, in which the worker claims the callback through the Execution API, validating the token, before running it.2hCVE-2026-1245785.3 MED—
———A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.7h