What is GHSA-qvg5-fcgx-c529?

GHSA-qvg5-fcgx-c529 is a security advisory published by GitHub Security Advisories with Critical severity. ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability,...

Which CVE IDs does GHSA-qvg5-fcgx-c529 cover?

GHSA-qvg5-fcgx-c529 covers the following CVE IDs: CVE-2026-18717. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qvg5-fcgx-c529?

GHSA-qvg5-fcgx-c529 has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

GHSA-qvg5-fcgx-c529CriticalCVSS 7.4

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability,...

Vendor

GitHub Security Advisories

Published

August 28, 2026

Last Modified

August 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-18717 →

📋 Description

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-18717
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-239-04.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-04
http://www.ase-systems.com
https://github.com/advisories/GHSA-qvg5-fcgx-c529