CVE-2026-18717

CVSS 9.1 (critical) · published 2026-08-28

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

Weakness: CWE-295

Source: NVD CVE-2026-18717

References

• http://www.ase-systems.com
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-04.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.