VULNpocalypse
InformationalVulnerabilityPatch available

CERT Polska reports KAMSOFT ZSIRep CLIENT certificate flaw

CERT Polska reports that KAMSOFT ZSIRep CLIENT before 2.12.3.1 does not validate server certificates; update to the fixed version.

Published
Fixed in
ZSIRep CLIENT 2.12.3.1; KS-SOMED 2026.03.0.01; KS-PPS 2026.03.1.0; KS-MEDIS 2026.03.0.0; KS-SOLAB 2026.3.1.0; KS-ASW 2026.3.0.1
Exploitation
No exploitation reported in the CERT Polska advisory (not confirmed either way)

Live scores

CVE-2026-113618
EPSS
0.001
low predicted chance of attack
VEDAS
0.052
little exploit evidence
On CISA KEV
Not listed
Detection rule
No public rule yet

What happened

According to CERT Polska, it received a report about a vulnerability in the KAMSOFT ZSIRep CLIENT library and took part in coordinating its disclosure. The advisory, published on 06 November 2026, tracks the issue as CVE-2026-113618 and classifies it as Improper Certificate Validation (CWE-295) CERT Polska.

CERT Polska says the library (ZSIREP.CLIENT.DLL) does not validate the server certificate. It reports that the library registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. According to CERT Polska, this would let a man-in-the-middle attacker impersonate the ZSIRep server and intercept or modify authentication data and documents. CERT Polska also says the callback persists after the client is closed, which weakens other HTTPS connections in the same application.

CERT Polska credits Kajetan Pawelec for the responsible report. It says the issue was fixed in ZSIRep CLIENT 2.12.3.1.

Not confirmed: the CERT Polska advisory does not say whether the flaw has been exploited. It gives no severity rating or CVSS score and no details on the number of affected installations. KAMSOFT’s own statement is not among the sources, and no NVD record was available to check.

Am I affected?

According to CERT Polska, all versions of the ZSIRep CLIENT library before 2.12.3.1 are vulnerable. CERT Polska says the library is used in these KAMSOFT products, with the fixed versions it lists:

  • KS-SOMED: fixed in 2026.03.0.01
  • KS-PPS: fixed in 2026.03.1.0
  • KS-MEDIS: fixed in 2026.03.0.0
  • KS-SOLAB: fixed in 2026.3.1.0
  • KS-ASW: fixed in 2026.3.0.1

If you run an earlier build of any of these products, or use ZSIREP.CLIENT.DLL directly, check your version against the list above. Whether other products embed the library is not confirmed in the sources.

What to do now

  1. Identify installations of KS-SOMED, KS-PPS, KS-MEDIS, KS-SOLAB and KS-ASW, and any other software that ships ZSIREP.CLIENT.DLL.
  2. Compare each installed version with the fixed versions listed above.
  3. Update to the fixed version for your product. CERT Polska lists ZSIRep CLIENT 2.12.3.1 as the library fix. Contact KAMSOFT for the update packages, since the sources do not describe the distribution method.
  4. Treat this as a vendor-fix matter. The sources describe no workaround.

Sources