CRITICAL 9.1 NVD

CVE-2026-90647

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TL

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client (Task Mode). This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneous faults, enabling a Man-in-the-Middle attack on protected communications.

References

Published: 2026-09-12 · Source: NVD · Feed updated: 2026-09-13
This critical severity vulnerability with a CVSS score of 9.1 was published on 2026-09-12 via NVD.

Risk Timeline

CVE Disclosed2026-09-12 · 0 days ago

Remediation Resources

Official Advisory
www.ase-systems.com/wp-content/uploads/2026/07/CYB_2026_86278_Advisory
vulnfeed aggregates 12842 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.