---
id: "CVE-2026-113618"
page: "https://infrastack.ai/live/CVE-2026-113618"
kind: "vulnerability"
aliases: ["CVE-2026-113618"]
title: "ZSIRep .NET client: accepts any HTTPS certificate, enabling man-in-the-middle interception"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["dotnet", "ks-asw", "ks-medis", "ks-pps", "ks-solab", "ks-somed", "package", "zsirep"]
not_affected_if: ["library-version-2.12.3.1-or-later", "no-zsirep-client-use"]
published_at: "2026-11-06T15:17:08+00:00"
first_seen_at: "2026-11-06T15:42:43+00:00"
updated_at: "2026-11-06T15:44:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-113618", "first_seen_at": "2026-11-06T15:42:43+00:00"}]
exploit_sources: []
---

# ZSIRep .NET client: accepts any HTTPS certificate, enabling man-in-the-middle interception

Link for people: https://infrastack.ai/live/CVE-2026-113618 (this .md is for agents)

The ZSIRep client library for .NET registers a process-wide callback that accepts any server certificate without checking it. An attacker on the network path can impersonate the ZSIRep server and read or change authentication data and documents, and the callback also weakens other HTTPS connections in the same application.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the application references ZSIREP.CLIENT.DLL and which version it ships with.
- Check the KS-SOMED, KS-PPS, KS-MEDIS, KS-SOLAB or KS-ASW installed version against the fixed releases.

## Fix

- ZSIRep client library: `2.12.3.1`
- KS-SOMED: `2026.03.0.01`
- KS-PPS: `2026.03.1.0`
- KS-MEDIS: `2026.03.0.0`
- KS-SOLAB: `2026.3.1.0`
- KS-ASW: `2026.3.0.1`

## Timeline

- 2026-11-06T15:42:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-113618

## From the sources

The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and intercept or modify authentication data and documents. The callback persists after the client is closed, weakening other HTTPS connections in the same application.


The issue was fixed in version 2.12.3.1. The library is used in KS-SOMED (fixed in 2026.03.0.01), KS-PPS (fixed in 2026.03.1.0), KS-MEDIS (fixed in 2026.03.0.0), KS-SOLAB (fixed in 2026.3.1.0), and KS-ASW (fixed in 2026.3.0.1).

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_