CVE-2026-19061 | Insta InstaKNXServiceApp 1.2.3.1469 Firmware Update CreateWebClientAndDownloadFileList data authenticity

A vulnerability was found in Insta InstaKNXServiceApp 1.2.3.1469 and classified as problematic. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity.

This vulnerability is registered as CVE-2026-19061. It is possible to launch the attack remotely. No exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More