CVE-2026-109399 - SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates
CVE ID :CVE-2026-109399 Published : Oct. 12, 2026, 3:16 p.m. | 15 minutes ago Description :SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain...