VYPR

LaserGest mobile application

by LaserGest

CVEs (1)

  • CVE-2026-112165MedNov 9, 2026
    risk 0.45cvss —epss —

    The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications.