Herowatch Mini by About Time Technologies has a system signing vulnerability (CVE-2026-121818) that allows authenticated local attackers to use a publicly available test key to sign malicious programs. This enables privilege escalation and arbitrary code execution on affected systems.