{"id":"CVE-2026-112165","published":"2026-11-09T17:17:09.720","lastModified":"2026-11-09T17:17:09.720","description":"The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode(\"nocheck\"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112165.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/livieromarco/security-advisories/blob/main/advisories/CVE-2026-112165.md","tags":[]}],"hasPoc":true,"ai":null}