CVE-2026-3822

8.3 highEPSS 0.2%

High (8.3) in taipower taipower app. EPSS 0.2% chance of exploitation in the next 30 days.

Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets.

Severity

CVSS 4.0

8.3 high

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2026-03-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

taipower:taipower_app

References

https://www.twcert.org.tw/en/cp-139-10751-23871-2.html
https://www.twcert.org.tw/tw/cp-132-10750-3735f-1.html

Check your stack JSON