Vulnerability · 1 source · latest 4h

Certificate validation flaw found in KAMSOFT ZSIRep CLIENT library

VULNERABILITYCVE-2026-113618redteam/daily · 1 source

Severity: Medium
Highest CVSS: 5.3
Exploited: Not known
Sources: 1

What happened

CERT Polska reports an Improper Certificate Validation vulnerability, CVE-2026-113618, in the KAMSOFT ZSIRep CLIENT library. The advisory excerpt does not list affected versions, CVSS score, exploitation status or a vendor fix. Defenders should identify any applications that embed or depend on this library and check the CERT Polska advisory and the vendor for patched versions.

For security analysts · Written by AI from 1 source · Wrong?

What to do

Check whether your organisation uses the KAMSOFT ZSIRep CLIENT library.
Watch the vendor and CERT Polska advisory for affected versions and a fixed release.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-113618CVSS 5.3The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and inte

Full story timeline · 2 updates

Who reported · 1 outlet

CERT Polska

Support usRedTeamDaily has no paywall. Readers like you keep security news free for everyone.