CVE-2026-19061 in InstaKNXServiceApp

Prediction

by VulDB Data Team • 08/06/2026

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-386531
• CPE: ready
• CWE: CWE-345 (confirmed)
• CVSS: 3.7 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19061
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19061
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19061/