CVE-2017-8060: WatchGuard Panda Mobile Security

Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.

Affected products

• WatchGuard Panda Mobile Security: version 1.1 only

Published 2017-05-05. Last modified 2026-06-17.