{"id":"CVE-2026-121624","kind":"vulnerability","aliases":["CVE-2026-121624"],"related":[],"title":"Nanosystems Supremo: improper certificate checks let network attackers read logins","description":"Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent attackers to intercept TLS connections by presenting untrusted certificates. Attackers on the same network can terminate and relay the client's TLS session using self-signed certificates to read usernames, SHA-256 password hashes, and license codes.","summary":"Supremo for Windows and macOS before 5.0.2.3874 does not properly validate TLS certificates. An attacker on the same network can present a self-signed certificate, intercept the session, and read usernames, SHA-256 password hashes and license codes.","severity":"high","cvss":7.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["macos","other","remote-support","supremo","windows"],"not_affected_if":["no-adjacent-network-exposure","version-5.0.2.3874-or-later"],"how_to_check":"- Check the installed Supremo version in the application's About screen or package metadata against `5.0.2.3874`","fix":"- Supremo for Windows and macOS: `5.0.2.3874` or later","status":"open","published_at":"2026-11-03T18:17:58+00:00","first_seen_at":"2026-11-03T18:22:10+00:00","triaged_at":"2026-11-03T18:22:33+00:00","updated_at":"2026-11-03T18:22:33+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-03T18:22:33Z","model":"claude-haiku-5-5","output":{"fix":"- Supremo for Windows and macOS: `5.0.2.3874` or later","reach":"network","title":"Nanosystems Supremo: improper certificate checks let network attackers read logins","impact":"medium","summary":"Supremo for Windows and macOS before 5.0.2.3874 does not properly validate TLS certificates. An attacker on the same network can present a self-signed certificate, intercept the session, and read usernames, SHA-256 password hashes and license codes.","audience":"businesses","category":"other","nicknames":[],"who_cares":["supremo","windows","macos","remote-support"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker reads login credentials and license codes from intercepted sessions","analyst_note":"Confirm the vulnerable version range and whether the fix is only for 5.0.2.3874 by checking the vendor advisory linked from VulnCheck and NVD.","how_to_check":"- Check the installed Supremo version in the application's About screen or package metadata against `5.0.2.3874`\n- unknown for other checks; the sources do not say","plain_action":"","needs_analyst":true,"not_affected_if":["version-5.0.2.3874-or-later","no-adjacent-network-exposure"],"who_is_affected":"Teams running Supremo remote-support clients on Windows or macOS are exposed when attackers share the same network segment, such as a shared office or public Wi-Fi. The sources describe the adjacent-network attack path only; whether a given deployment is reachable depends on where the clients connect. Machines already on Supremo 5.0.2.3874 or later are not affected.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000721,"input_tokens":4175,"output_tokens":607,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-121624':13A,16A '-2026':12A,15A '-256':57B,112C '5.0.2.3874':30B,70C 'adjac':79C 'allow':78C 'attack':8A,38B,80C,89C 'certif':4A,36B,49B,74C,88C,107C 'check':5A 'client':99C 'code':62B,117C 'connect':84C 'contain':71C 'cve':11A,14A 'hash':59B,114C 'improp':3A,73C 'intercept':50B,82C 'let':6A 'licens':61B,116C 'login':10A 'maco':17B,28B,68C 'nanosystem':1A,63C 'network':7A,42B,93C 'password':58B,113C 'present':44B,86C 'proper':33B 'read':9A,54B,109C 'relay':97C 'remot':20B 'remote-support':19B 'self':47B,105C 'self-sign':46B,104C 'session':52B,102C 'sha':56B,111C 'sign':48B,106C 'support':21B 'supremo':2A,22B,24B,64C 'termin':95C 'tls':35B,83C,101C 'untrust':87C 'use':103C 'usernam':55B,110C 'valid':34B,75C 'vulner':76C 'window':23B,26B,66C","nicknames":[],"mitigations":[],"who_affected":"Teams running Supremo remote-support clients on Windows or macOS are exposed when attackers share the same network segment, such as a shared office or public Wi-Fi. The sources describe the adjacent-network attack path only; whether a given deployment is reachable depends on where the clients connect. Machines already on Supremo 5.0.2.3874 or later are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","macos","other","remotesupport","supremo","windows"],"campaign_type":null,"first_public_at":"2026-11-03T18:17:58+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-121624","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-121624","severity":null,"published_at":"2026-11-03T18:17:58+00:00","modified_at":"2026-11-03T18:17:58+00:00","first_seen_at":"2026-11-03T18:22:10+00:00","fetched_at":"2026-11-03T18:22:10+00:00","note":null}],"documents":[{"id":59642,"url":"https://www.vulncheck.com/advisories/nanosystems-supremo-before-5.0.2.3874-improper-tls-certificate-validation","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}