Skip to content
OpenAdvisories

Vendor

KaringX

1 known vulnerabilities.

Products

clashmi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-118682

    ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM

    KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, allowing attackers to intercept HTTPS traffic by presenting any certificate. Attackers operating the user's proxy node can serve a forged update manife…

    KaringX clashmi