---
id: CVE-2026-19061
title: A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469
summary: >-
  A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this
  issue is the function CreateWebClientAndDownloadFileList of the component
  Firmware Update Handler. Executing a manipulation can lead to insufficient
  verificat…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
cwe:
  - CWE-345
published: '2026-08-06'
updated: '2026-08-08'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-19061'
references:
  - url: 'https://gist.github.com/isZzzz/f9da7d76cf2f7b93ec3f90efe17ed323'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-19061'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/864343'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/386531'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/386531/cti'
    label: cna@vuldb.com
tags:
  - nvd
epss: 0.00218
epssPercentile: 0.10909
ingestedAt: '2026-08-08T21:30:13.818Z'
---

## Overview

A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.