Crucial Airline Flight Planning App Open to Interception Risks

Pen Test Partners disclosed that Navblue's Flysmart+ Manager iOS app had App Transport Security disabled and lacked certificate validation, enabling a man-in-the-middle attack during app updates that could allow tampering with flight performance and planning data; although exploitation requires proximity (e.g., pilot layover Wi‑Fi) and timing during updates, the flaw could lead to incorrect engine power or braking calculations and pose safety risks if abused, and Navblue has since remediated the issue.