CVE-2026-86474: Fermax Electronica S.a.u Duox Plus Monitor Firmware Veo Wi-Fi Range

High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days.

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel.

Affected products

• Fermax Electronica S.a.u Duox Plus Monitor Firmware Veo Wi-Fi Range: before 01.48.001 (fixed in 01.48.001)

Published 2026-09-16. Last modified 2026-09-18.