VULNERABILITY INTELLIGENCE
CVE-2026-25608
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-05-22
Last modified2026-07-23
Description
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authentication tokens. This issue was fixed in version 9.5.
Weakness classification
- cvd@cert.pl: CWE-319