Live › vulnerability › CVE-2026-121624
Supremo for Windows and macOS before 5.0.2.3874 does not properly validate TLS certificates. An attacker on the same network can present a self-signed certificate, intercept the session, and read usernames, SHA-256 password hashes and license codes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 18:22 UTC. All times on this page are UTC.
Teams running Supremo remote-support clients on Windows or macOS are exposed when attackers share the same network segment, such as a shared office or public Wi-Fi. The sources describe the adjacent-network attack path only; whether a given deployment is reachable depends on where the clients connect. Machines already on Supremo 5.0.2.3874 or later are not affected.
No product ranges from the sources yet.
5.0.2.38745.0.2.3874 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent attackers to intercept TLS connections by presenting untrusted certificates. Attackers on the same network can terminate and relay the client's TLS session using self-signed certificates to read usernames, SHA-256 password hashes, and license codes.
This page as .md · .json · in your agent: get_signal("CVE-2026-121624")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.