CVE-2026-113618
The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate…
- Risk score
- 42/100
- CVSS
- 5.3 v4.0
- Published
- 6 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and intercept or modify aut…
- Affected
- See advisory
- Fix
- Upgrade the product to 2.12.3.1, 2026.03.0.01, 2026.03.1.0, 2026.03.0.0, 2026.3.1.0 or 2026.3.0.1 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 5.3 medium
- On your watchlist: .net
References
Original description
The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and intercept or modify authentication data and documents. The callback persists after the client is closed, weakening other HTTPS connections in the same application. The issue was fixed in version 2.12.3.1. The library is used in KS-SOMED (fixed in 2026.03.0.01), KS-PPS (fixed in 2026.03.1.0), KS-MEDIS (fixed in 2026.03.0.0), KS-SOLAB (fixed in 2026.3.1.0), and KS-ASW (fixed in 2026.3.0.1).
Last activity 6 Nov 2026. Patch Forecast updates every hour.