CVE-2026-3822 | BDVDB-2026-319334 Detail
TaipowerTaipower APP
Description#
Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets.
Impact#
CAPEC-94 Adversary in the Middle (AiTM)
Weaknesses#
- CWE-295 Improper certificate validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.