CVE-2026-18717

9.1 criticalEPSS 0.3%

Critical (9.1). EPSS 0.3% chance of exploitation in the next 30 days.

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

Severity

CVSS 4.0

9.1 critical

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2026-08-28
Modified: 2026-08-31
Record from: the NVD, synced 2026-10-19

References

http://www.ase-systems.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-04.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04

Check your stack JSON