---
id: "CVE-2026-121624"
kind: "vulnerability"
aliases: ["CVE-2026-121624"]
title: "Nanosystems Supremo: improper certificate checks let network attackers read logins"
severity: "high"
cvss: 7.6
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["macos", "other", "remote-support", "supremo", "windows"]
not_affected_if: ["no-adjacent-network-exposure", "version-5.0.2.3874-or-later"]
published_at: "2026-11-03T18:17:58+00:00"
first_seen_at: "2026-11-03T18:22:10+00:00"
updated_at: "2026-11-03T18:22:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121624", "first_seen_at": "2026-11-03T18:22:10+00:00"}]
---

# Nanosystems Supremo: improper certificate checks let network attackers read logins

Supremo for Windows and macOS before 5.0.2.3874 does not properly validate TLS certificates. An attacker on the same network can present a self-signed certificate, intercept the session, and read usernames, SHA-256 password hashes and license codes.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Supremo version in the application's About screen or package metadata against `5.0.2.3874`

## Fix

- Supremo for Windows and macOS: `5.0.2.3874` or later

## Timeline

- 2026-11-03T18:22:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121624

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/nanosystems-supremo-before-5.0.2.3874-improper-tls-certificate-validation

## From the sources

Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent attackers to intercept TLS connections by presenting untrusted certificates. Attackers on the same network can terminate and relay the client's TLS session using self-signed certificates to read usernames, SHA-256 password hashes, and license codes.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_