FERMAX: CVE Program partner

CVEs, 365 days55 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Fermax Technologies SLU
Role	CNA
Type	Vendor
Reports to	INCIBE → mitre
Scope	Vulnerabilities discovered in the services and applications of the MeetMe and DuoxMe products that are not covered by another CNA’s scope.
Advisories	https://www.fermax.com/security-advisories

CVE-2026-86585 2026-09-16 · CVSS 7.7
The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls
CVE-2026-86474 2026-09-16 · CVSS 7.7
The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to
CVE-2026-85628 2026-09-16 · CVSS 7.0
Transmission of the home Wi-Fi credentials without encryption during the pairing process between the DuoxMe application and VEO and VEO-XS Wi-Fi monitors, in ve
CVE-2026-86443 2026-09-16 · CVSS 6.9
Cleartext storage of sensitive information in the DuoxMe application for Android, in versions prior to 4.3.4, allows an attacker with local access to the device
CVE-2025-10971 2025-12-02 · CVSS 8.8
Insecure Storage of Sensitive Information vulnerability in MeetMe on iOS, Android allows Retrieve Embedded Sensitive Data. This issue affects MeetMe: through v2

FERMAX