{"affected":[{"defaultStatus":"unaffected","product":"Herowatch Go","source":"CNA: twcert","vendor":"About Time Technologies","versions":[{"status":"affected","version":"all","versionType":"custom"}]}],"cveId":"CVE-2026-121818","cwes":["CWE-1394"],"description":"Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key to sign malicious programs, allowing them to elevate privileges and execute arbitrary code.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.5,"severity":"high","source":"CNA: twcert","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.8,"severity":"high","source":"CNA: twcert","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793775373525,"publishedAt":1793773613550,"references":[{"source":"CNA: twcert","tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/en/cp-139-11362-1e829-2.html"},{"source":"CNA: twcert","tags":["third-party-advisory"],"url":"https://www.twcert.org.tw/tw/cp-132-11360-ab123-1.html"}],"remediation":[{"kind":"fix","source":"CNA: twcert","text":"The product is no longer maintained. Users are advised to replace it with a supported device."}],"revision":"97da4a1966eb89642bd7a752f790e1dae443d50aaadddd095beb088ba19c560f","sources":[{"modifiedAt":1793775373525,"name":"CNA: twcert","retrievedAt":1793776156146,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121818"}],"ssvc":null,"status":"published","title":"About Time Technologies｜Herowatch Go - Security Misconfiguration","updatedAt":1793776156146}