TVN ID	TVN-202611003
CVE ID	CVE-2026-121818
CVSS	8.5 (High) CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 7.8 (High) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products	Herowatch Go App all versions
Description	Herowatch Mini developed by About Time Technologies has a system signing vulnerability. Authenticated local attackers can exploit a publicly available test key to sign malicious programs, allowing them to elevate privileges and execute arbitrary code.
Solution	The product is no longer maintained. Users are advised to replace it with a supported device.
Credit	legendyang
Public Date	2026-11-04