CyberSecBulletin

Sbabic vulnerabilities

We track 2 vulnerabilities in Sbabic products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest Sbabic vulnerabilities

  • 8.1 High severity

    swupdate: Improper Certificate Validation

    CVE-2026-109399Sbabic

    SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling

  • 7.3 High severity

    SWUpdate: Time-of-check Time-of-use (TOCTOU) Race Condition

    CVE-2025-41259Sbabic

    SWUpdate before 2026.05 is affected by a time-of-check time-of-use (TOCTOU) race condition that allows local unprivileged attackers to escalate privileges to root or install untrusted contents using a signed update.