CVE-2026-12058
Description
A bypass of the connection confirmation pop-up in vivo PcSuite (versions below 6.2.0) allows an adjacent attacker to activate a feature without user consent.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A bypass of the connection confirmation pop-up in vivo PcSuite (versions below 6.2.0) allows an adjacent attacker to activate a feature without user consent.
Vulnerability
The connection confirmation pop-up of a specific feature in vivo PcSuite can be bypassed. This vulnerability affects PcSuite versions below 6.2.0 [1]. The exact feature is not disclosed, but the bypass allows the pop-up to be circumvented without proper user interaction.
Exploitation
An attacker on an adjacent network (CVSS vector AV:A) can exploit this vulnerability without authentication or user interaction (PR:N, UI:N) [1]. The specific steps to trigger the bypass are not detailed in the advisory, but the attack requires network proximity to the target device running an affected PcSuite version.
Impact
Successful exploitation results in a low integrity impact (CVSS I:L) [1]. The attacker can bypass the connection confirmation pop-up, potentially enabling a feature that would normally require user approval. No confidentiality or availability impact is reported.
Mitigation
The vulnerability is fixed in PcSuite version 6.2.0 [1]. Users should update to the latest version to mitigate the risk. No temporary workaround is provided by the vendor.
AI Insight generated on Jun 12, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
1News mentions
0No linked articles in our index yet.