Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-113618— Improper Server Certificate Validation in ZSIRep Client Library

Quick assessment

Affected
KAMSOFT ZSIRep Client Library
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ZSIRep 客户端库（ZSIREP.CLIENT.DLL）存在服务器证书验证不当的漏洞。该库注册了一个进程级的 .NET 回调，该回调在建立 HTTPS 连接时接受任何证书而无需进行验证。这使得中间人攻击者能够冒充 ZSIRep 服务器，拦截或篡改认证数据及文档。此外，该回调在客户端关闭后依然持续存在，从而削弱了同一应用程序中其他 HTTPS 连接的安全性。 该问题已在版本 2.12.3.1 中修复。该库被用于以下产品，并已在相应版本中完成修复： KS-SOMED（修复版本：2026.03.0.01） KS-PP

CVSS 5.3 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-113618

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Improper Server Certificate Validation in ZSIRep Client Library
Source: CVE Program / CVE List V5
Vulnerability Description
The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and intercept or modify authentication data and documents. The callback persists after the client is closed, weakening other HTTPS connections in the same application. The issue was fixed in version 2.12.3.1. The library is used in KS-SOMED (fixed in 2026.03.0.01), KS-PPS (fixed in 2026.03.1.0), KS-MEDIS (fixed in 2026.03.0.0), KS-SOLAB (fixed in 2026.3.1.0), and KS-ASW (fixed in 2026.3.0.1).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
KAMSOFT ZSIRep Client Library 0.0 ~ 2.12.3.1 -

II. Public POCs for CVE-2026-113618

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-113618

请登录查看更多情报信息。

Other References for CVE-2026-113618 (2)

IV. Related Vulnerabilities

Same vendor: KAMSOFT
Same weakness: CWE-295