CVE-2026-18717: Applied Systems Engineering ASE2000 v2

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

Affected products

• Applied Systems Engineering ASE2000 v2: from 2.25, up to and including 2.37

Published 2026-08-28. Last modified 2026-08-31.