CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- mod gnutls project gnutls, airtower-luna mod gnutls +1 moremod_gnutls missing key purpose check in client certificate verification6.8 Medium
hybridauth/hybridauthPackagistHybridAuth SSL Curl.php certificate validation6.3 Medium- devolutions serverImproper certificate validation in the PAM propagation WinRM connections allows a network...8.1 High
- smallstep certificates, step-ca +1 moreStep CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)10.0 Critical
aws-lc-syscrates.ioAWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN8.2 High- aws aws-lc, aws-lc-fips +1 moreCRL Distribution Point Scope Check Logic Error in AWS-LC9.1 Critical
- devolutions hub reporting serviceImproper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier...8.1 High
github.com/argoproj-labs/terraform-provider-argocdGoTerraform Provider for ArgoCD has possible exposure to GO-2026-4337 / CVE-2025-681214.8 Medium- gl-inet comet kvm, comet gl-rm1 firmware +1 moreGL-iNet Comet (GL-RM1) KVM insufficient certificate validation6.3 Medium
- yhirose cpp-httplibcpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy8.7 High
- fit2cloud jumpserverJumpServer Improper Certificate Validation in Custom SMS API Client5.0 Medium
- lenovo filezAn improper certificate validation vulnerability was reported in the Lenovo Filez application...7.5 High
- lenovo filezAn improper certificate validation vulnerability was reported in the Lenovo Filez application...6.0 Medium
- dell alienware command center (awcc), alienware command center +1 moreDell Alienware Command Center (AWCC), versions prior to 6.12.24.0, contain an Improper...2.5 Low
- qnap video stationVideo Station0.1 Low
github.com/arslanbekov/terraform-provider-sendgridGoTerraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go10.0 Critical- adobe acrobat, acrobat 2024, acrobat dc +1 more +3 moreAcrobat Reader | Improper Certificate Validation (CWE-295)5.5 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,...6.3 Medium
- taipower appTaipower｜Taipower APP(Android) - Improper Certificate Validation8.3 High
- apache zookeeper, red hat amq broker 7.12.7, amq broker 7.13.5 +14 more +16 moreApache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager7.4 High
- ellite wallosWallos: Server-Side Request Forgery (SSRF) in Notification Testers8.8 High
- go standard library crypto/x509, golang go +1 morePanic in name constraint checking for malformed certificates in crypto/x5095.9 Medium
- go standard library crypto/x509, golang go, red hat assisted installer for red hat openshift container platform 2 +99 more +101 moreIncorrect enforcement of email constraints in crypto/x5097.5 High
- nozomi networks arcLack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.06.3 Medium
- seppmail secure email gateway, seppmail +1 moreS/MIME Certificate Subject Whitespace7.8 High
openclawnpmOpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)5.3 Medium- devolutions remote desktop managerImproper enforcement of the Disable password saving in vaults setting in the connection entry...9.8 Critical
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Certificate Chain Validation Bypass in AWS-LC8.7 High
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in the FTP Backup on the ADM.8.3 High
- open-emr openemrOpenEMR Has Disabled SSL Certificate Verification in HTTP Client8.1 High
- ymfe yapiyapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent7.4 High
- jxcore jxmAn issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm...7.4 High
- fofolee utools-quickcommandAn issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools...6.5 Medium
- No product listedAn issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To...9.1 Critical
- linuxfoundation strimzi kafka operator, red hat streams for apache kafka 2, streams for apache kafka 3 +1 more +3 moreStrimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication8.1 High
- linuxfoundation strimzi, strimzi strimzi-kafka-operator +1 moreStrimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters5.9 Medium
- sigstore cosignCosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked3.7 Low
- No product listedAn issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers...7.5 High
- thales safenet agent for windows logonImproper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon2.5 Low
- tp link systems inc. omada app, tp-link aginet, deco +21 more +23 moreInsufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception7.7 High
- solax power pocket wifi 3.0, pocket wifi 4.0, pocket wifi+4gm +2 more +4 moreMissing Certificate Validation for Solax Power Pocket WiFi models MQTT Cloud Connection9.4 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Validation of Terminal Server Agent Certificate1.3 Low
- sunbird sunbirded-portalAn issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information....7.5 High
- microsoft azure localAzure Local Remote Code Execution Vulnerability8.1 High
- sumatrapdfreader sumatrapdfSumatraPDF Update MITM -> Arbitrary Code Execution7.5 High
- eaton network m3The server identity check mechanism for firmware upgrade performed via command shell is...5.7 Medium
- datahubDataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade7.5 High
- keylime, red hat enterprise linux 10, enterprise linux 10.0 extended update support +9 more +11 moreKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication9.4 Critical
- tanium appliance, tanos +1 moreTanium addressed an improper certificate validation vulnerability in Tanium Appliance.3.7 Low
- tp-link systems inc. tapo h100 v1, tapo p100 v1, tp-link tapo h100 firmware +1 more +3 moreImproper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack7.5 High
- Show moreLoading…