CVE Feed

    Dashboard / CVE / CVE-2026-85628

    CVE-2026-85628

    Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.

    Published:Sep 16, 2026
    Last Modified:Sep 18, 2026
    EPS:Sep 16, 2026
    EPSS Score:0.00077
    CVSS Score:7

    Affected Products

    Vendor
    Fermax Electronica
    Product
    Duox Plus Monitor Firmware (veo Wi-fi Range)
    Vendor
    Fermax Electronica
    Product
    Duoxme

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High