Connective eID Extension Flaws Let Attackers Steal Belgian ID PINs and Trigger Drive

Cybersecuritynews •Abinaya • August 10, 2026

Critical flaws have been found in the Connective Signing Extension, a browser component used by more than 2 million people in Belgium to access electronic identity cards and Maestro payment cards. The now-patched issues could have allowed malicious websites, ads, or hidden iframes to read card data, steal eID PINs, create fraudulent signing requests, and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Belgian eID Software Expose Millions to Identity Theft Critical security vulnerabilities in Belgium's national eID middleware have exposed users from eight of the country's ten largest banks and over 60 government agencies to remote code execution and identity theft. The middleware, essential for authentication between Belgian eID smart cards and third-party services, lacks published CVE identifiers and official advisories from Belgian cybersecurity authorities. Attackers could exploit these flaws to steal credentials and execute arbitrary code on users' machines. The Belgian government has open-sourced the vulnerable middleware, allowing for public audit, but the timeline of the vulnerabilities and potential prior exploitation remains unclear. Users are advised to update to the latest version of the middleware and review authentication logs for any suspicious activity. The window of exposure is currently unknown, raising concerns about the extent of the impact. 8 sources 70

Connective eID Extension Flaws Let Attackers Steal Belgian ID PINs and Trigger Drive

The full story

Extracted Entities

Attack Types (1)

Countries (1)