← All Review Workshop advisories
The publisher chose its own name and web address on Vandorisk; Vandorisk has not verified its identity.
Fixed outdated OpenSSL in NT-200 firmware
HighPublished 29 Sept 2026
CVE: CVE-2026-41678
Affected products: Review Thermostat NT-200
Affected versions: 1.0.0 – 1.0.1
Fixed versions: 1.0.2
Summary: OpenSSL high findings in the NT-200 firmware SBOM are addressed in 1.0.2. Users should update via signed OTA.
A screen of the NT-200 SBOM found high OpenSSL advisories.
Update to 1.0.2 via signed OTA.
Machine-readable advisory
This advisory is also available as a CSAF 2.0 document (category csaf_security_advisory) for automated consumption.
Security advisory published by Review Workshop under Regulation (EU) 2024/2847, Annex I Part II(4). The publisher chose its own name and web address on Vandorisk; Vandorisk has not verified its identity.