Critical RCE in Connective eID Extension threatens 8/10 Belgian Banks
Researchers found that Connective’s eID signing extension—used by over two million users, eight of Belgium’s ten biggest banks and dozens of government services—lets any website read smart‑card data, steal eID PINs and trigger remote‑code execution via a malicious library. The flaw gave attackers silent, full‑control over user credentials, prompting a 146‑day patch cycle.