CVE-2026-3822

MEDIO 4.8CVE-2026-3822 · Published 09/03/2026 · updated 17/06/2026

In breve

CVE-2026-3822 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda taipower app (taipower).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.16%, superiore al 5.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
taipower app taipower	`≤ 3.4.4`	No fix yet

Description

Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets.

References

twcert.org.tw/en/cp-139-10751-23871-2.html · Third Party Advisory
twcert.org.tw/tw/cp-132-10750-3735f-1.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free