HIGH 8.5 NVD

CVE-2026-121818

Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key

Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key to sign malicious programs, allowing them to elevate privileges and execute arbitrary code.

References

https://www.twcert.org.tw/en/cp-139-11362-1e829-2.html
https://www.twcert.org.tw/tw/cp-132-11360-ab123-1.html

Published: 2026-11-04 · Source: NVD · Feed updated: 2026-11-04

This high severity vulnerability with a CVSS score of 8.5 was published on 2026-11-04 via NVD.

vulnfeed aggregates 18348 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.