CVE-2025-13053Low· 3.7▾ SunlitWhen a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle (…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.10%
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the UPS server configuation.
This issue affects ADM: from 4.1.0 through 4.3.3.RKD2, from 5.0.0 through 5.1.0.RN42.
data_master >= 4.1.0.RHU2, < 4.3.3.ROF1data_master >= 5.0.0.ra82, < 5.1.1.RCI1Upgrade past the affected range:
data_master 5.1.1.RCI1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-13052Medium· 5.9When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-…
CVE-2026-116198Medium· 4.3Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store
CVE-2026-115247Medium· 4.3subhajitkhan online-clinic-management-system patientregistration.php missing encryption
CVE-2026-111063Medium· 6.3AIOHTTP: Secure attribute not enforced for shared cookie
CVE-2026-86375Medium· 6.2Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability
CVE-2026-80806Medium· 4.7kernel: ext4: don't enable DAX on new encrypted files (CVE-2026-80806)