CVE-2026-109399
CRITICAL
9,2
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
HIGH
8,1
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Description
AI Translation Available
SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can embed that intermediate in the signature to install malicious updates.
295
Improper Certificate Validation
DraftCommon Consequences
Security Scopes Affected:
Integrity
Authentication
Potential Impacts:
Bypass Protection Mechanism
Gain Privileges Or Assume Identity
Applicable Platforms
Technologies:
Not Technology-Specific, Web Based, Mobile
https://github.com/sbabic/swupdate
https://github.com/sbabic/swupdate/blob/2026.05.1/crypto/swupdate_cms_verify_op…
https://github.com/sbabic/swupdate/commit/e66c5640664a31668926a24c0c84b6b6570dc…
https://groups.google.com/g/swupdate/c/dsoMcGFnEns
https://www.vulncheck.com/advisories/swupdate-through-2026.05.1-cms-signature-v…