CVE-2026-85628CWE-319

CVE-2026-85628

published September 16, 2026

CVSS
7.0
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in versions prior to 4.3.4 of the application and 01.50.001 of the monitor firmware, allows an attacker on the Wi-Fi Direct network to intercept the network password.

The record
Technical detail
CVSS
7.0 · NONE
CVSS v4.0
7.0 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:L/SA:N
EPSS
0.00088 · 0.4th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-09-16T14:16Z
References (1)
https://fermax.com/security-advisories · 539080bd-5750-4cce-b30b-eed9a4ef6dcc
EPSS history
Timeline
  • 17 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 16 SEP 09:36Z
    Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability
    cvelistv5