CVE-2026-113469CWE-287
CVE-2026-113469
High · published October 20, 2026
What it is
A failure has been identified in the SNS during dynamic data files signature check.
A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00155 · 4.3th percentile
- Weakness
- CWE-287 · Improper Authentication
- Published
- 2026-10-20T13:17Z
References (1)
EPSS history
Timeline