CVE-2026-3822
Taipower｜Taipower APP(Android) - Improper Certificate Validation
- State
- Published
- Severity
- 8.3 High
- Published
- Mar 9, 2026
- Updated
- Mar 11, 2026
- Reserved
- Mar 9, 2026
Description
Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability. When establishing an HTTPS connection with the server, the application fails to verify the server-side TLS/SSL certificate. This flaw allows an unauthenticated remote attackers to exploit the vulnerability to perform a Man-in-the-Middle (MITM) attack to read and tamper with network packets.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.3 High | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N | twcert |
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N | twcert |
Weaknesses
- CWE-295 Improper certificate validation
Affected Products
| Product | Versions |
|---|---|
Taipower APPTaipower |
|
References
- https://www.twcert.org.tw/tw/cp-132-10750-3735f-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-10751-23871-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.