{"vulnerability": "CVE-2026-90647", "sightings": [{"uuid": "86211344-0b55-4136-8508-1d970bb25115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mveaefpgmm2w", "content": "CVE-2026-90647 - ase2000 v2 communication test set\nThe ASE2000 V2 Communication Test Set for Windows does not correctly check security certificates when using its secure TLS connection. This weakness lets someone\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#kalkitech #CVE #infosec", "creation_timestamp": "2026-09-12T23:30:08.026562Z"}, {"uuid": "e6092d3c-97db-4495-afd6-d3f124b9da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117260788422772028", "content": "CVE-2026-90647 (CRITICAL, CVSS 9.1) affects Kalkitech ASE2000 V2 (2.35 \u2013 2.37): improper TLS certificate validation in IEC 60870-5-104 enables MitM attacks. No patch confirmed. Restrict access & monitor. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-ase2000-v2-communication-test-set-2a292ef0f6b1257f #OffSeq #ICS #CVE202690647 #TLS", "creation_timestamp": "2026-09-13T00:00:36.567431Z"}, {"uuid": "8144dd50-fed3-4fee-ac5a-9ce8200303f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90647", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvec2ydp322e", "content": "Kalkitech ASE2000 V2 (2.35-2.37) faces a CRITICAL TLS flaw (CVE-2026-90647, CVSS 9.1): improper cert validation enables MitM. Restrict access & watch for suspicious activity. Patch status pending. https://radar.offseq.com/threat/cve-2026-90647-cwe-295-improper-certificate-validation-in-kalkitech-...", "creation_timestamp": "2026-09-13T00:00:42.553508Z"}, {"uuid": "65687406-7adf-4131-8dfc-e6ddf9db3f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://gist.github.com/ichintu/22032aad19461863ee27dbdb173d32b1", "content": "Published September 12, 2026, **CVE-2026-90647** is a critical (9.1) vulnerability in the Kalkitech ASE2000 V2 Communication Test Set (Windows v2.35\u20132.37) that allows network attackers to bypass TLS certificate validation, enabling Man-in-the-Middle attacks.", "creation_timestamp": "2026-09-13T00:02:48.767486Z"}, {"uuid": "cc9bbea0-8448-4157-96ef-83c55c4cec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b57a5lyr5756k", "content": "CVE-2026-90647 - Kalkitech ASE2000 Improper Certificate Validation Vulnerability\nCVE ID : CVE-2026-90647\n \n Published : Sept. 12, 2026, 11:17 p.m. | 21\u00a0minutes ago\n \n Description : ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an imprope...", "creation_timestamp": "2026-09-13T00:07:09.465808Z"}, {"uuid": "a4b50951-e77b-4f88-89d1-746c4047daee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvecgo2p4n2b", "content": "\ud83d\udea8 CVE-2026-90647 \u2014 CVSS 9.1 CRITICAL\n\nASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certifica...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-13T00:07:14.246222Z"}]}