CVE-2026-113469: Improper Signature Verification of Active Update Files

Published Oct 20, 2026

Updated

A failure has been identified in the SNS during dynamic data files signature check.

A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade SNS to a version that resolves this vulnerability.
Fixed in 4.8.20 LTSB
Upgrade
Upgrade SNS to a version that resolves this vulnerability.
Fixed in 5.0.10
Upgrade
Upgrade SNS to a version that resolves this vulnerability.
Fixed in 5.1.4 EA

Event History

Oct 20, 2026

CVE Published

via MITRE·08:29 AM

Data Sourced

via MITRE·08:29 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attack vector is adjacent network, so the attacker must be on a network adjacent to the affected SNS. Exploitation is rated high complexity and does not require privileges or user interaction.

What could a successful exploit allow?

The vulnerability is rated as having high impact on confidentiality, integrity, and availability. It could allow acceptance of an unauthenticated dynamic data update during the Autoupdate routine.