What is GHSA-v442-3w5q-c7m5?

GHSA-v442-3w5q-c7m5 is a security advisory published by GitHub Security Advisories with Medium severity. A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the...

Which CVE IDs does GHSA-v442-3w5q-c7m5 cover?

GHSA-v442-3w5q-c7m5 covers the following CVE IDs: CVE-2026-19061. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v442-3w5q-c7m5?

GHSA-v442-3w5q-c7m5 has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-v442-3w5q-c7m5MediumCVSS 3.7

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-19061 →

📋 Description

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2026-19061
https://gist.github.com/isZzzz/f9da7d76cf2f7b93ec3f90efe17ed323
https://vuldb.com/cve/CVE-2026-19061
https://vuldb.com/submit/864343
https://vuldb.com/vuln/386531
https://vuldb.com/vuln/386531/cti
https://github.com/advisories/GHSA-v442-3w5q-c7m5