CVE-2026-0392: eParakstītājs 3.0 0 to before 1.10.0

Affected technology

eParakstītājs 3.0 · 0 to before 1.10.0
Latvijas Valsts radio un televīzijas centrs (LVRTC)

Description’s affected range: before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · Active user interaction

What an attacker can do

The source reports that an attacker could run attacker-chosen code under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high.