GCVE - cpe:2.3:a:insta:instaknxserviceapp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:insta:instaknxserviceapp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Insta (`e0a5d9ef-0b72-5957-9786-bd7d2bbf0e17`)
Product	Instaknxserviceapp (`39dbc4ce-4d63-5551-a34e-8fab3b241906`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-19061`	vulnerable	2026-09-16 04:34:15.418994	Insta InstaKNXServiceApp Firmware Update CreateWebClientAndDownloadFileList data authenticity LOW (3.7) A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation is known to be difficult. There are still doubts about whether this vulnerability truly exists. The vendor explains: "[T]he entry suggests that the device does not verify the authenticity of the update. This is incorrect. The device performs an authenticity check after the complete update has been transferred. If this check fails, the update is not installed and the previously installed firmware continues to run". Published: 2026-08-06T17:00:09.377Z Updated: 2026-10-13T12:58:33.068Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/386531 https://vuldb.com/vuln/386531/cti https://vuldb.com/cve/CVE-2026-19061 https://vuldb.com/submit/864343 https://gist.github.com/isZzzz/f9da7d76cf2f7b93ec3f90efe17ed323	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.