CVE-2026-112165: Disabled TLS Certificate Validation Enables MITM Attacks

Published Nov 9, 2026

Updated

The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communications.

Affected Software

1 affected component

LaserGest LaserGest mobile application

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Configuration
Replace setServerTrustMode("nocheck") with a server trust mode that performs TLS certificate and hostname verification.
LaserGest mobile application server trust mode = certificate and hostname validation enabled

Event History

Nov 9, 2026

CVE Published

via MITRE·04:32 PM

Data Sourced

via MITRE·04:32 PM

DescriptionWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of the LaserGest mobile application are exposed when their network traffic can be intercepted by a man-in-the-middle attacker. The affected communications include credentials and API traffic.

What does an attacker need to exploit it?

An attacker needs the ability to position themselves to intercept the application's network traffic. No application privileges or user interaction are required according to the provided severity vector.

Are TLS protections active by default in the affected application?

No. The application uses setServerTrustMode("nocheck"), which disables both TLS certificate validation and hostname verification.

What could an attacker do after intercepting traffic?

An attacker could read or modify intercepted network traffic, including credentials and API communications. The provided impact assessment indicates high confidentiality and integrity impact.

CVE-2026-112165: Disabled TLS Certificate Validation Enables MITM Attacks

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are TLS protections active by default in the affected application?

What could an attacker do after intercepting traffic?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are TLS protections active by default in the affected application?

What could an attacker do after intercepting traffic?