VYPR

VEO and VEO-XS Wi-Fi monitors

by Fermax

CVEs (2)

  • CVE-2026-86474HigSep 16, 2026
    risk 0.50cvss epss

    The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

  • CVE-2026-85628HigSep 16, 2026
    risk 0.45cvss epss

    Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct…