CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- wolfsslTrusted peer certificate match ignores public key, allowing forged CA clones8.3 High
- edgelesssys contrastContrast before 1.16.0 Remote Attestation Relay Attack9.1 Critical
- nodemailerNodemailer 5.0.0 through 10.0.1 TLS servername Cache Confusion6.0 Medium
- nettyNetty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass8.7 High
- openclawOpenClaw iOS Control UI TLS Pin Enforcement Bypass9.0 Critical
- zammadZammad: S/MIME signature verification allows forged sender impersonation7.1 High
- eufy omni c20Improper certificate validation in Eufy Omni C209.3 Critical
- dell thinos 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper...8.3 High
- havelsan inc. liman render engineTLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine5.9 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Trust-store whitelist by Issuer+Serial only9.1 Critical
- cisco cloudCloud - Critical - Remote code execution - SA-CONTRIB-2026-1764.8 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...6.8 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability7.9 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities3.7 Low
- adobe connect, connect android mobile app, connect for mobile +2 moreAdobe Connect | Improper Certificate Validation (CWE-295)6.2 Medium
- nvidia infrastructure controller, infra controller +1 moreNVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause...7.5 High
- nvidia infrastructure controller, infra controller +1 moreNVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause...6.7 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch9.2 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilities.8.1 High
- agronholm anyioAnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing9.3 Critical
- teluu pjsip, pjsip pjproject +1 morePJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)7.4 High
- synology diskstation manager (dsm)An improper certificate validation vulnerability in Email API in Synology DiskStation Manager ...7.1 High
- kiteworks security-advisoriesSteeltoe: Header-forwarded client cert lacks proof of private-key possession6.5 Medium
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper...6.8 Medium
- open-telemetry opentelemetry-goOpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning6.3 Medium
- cisco secure firewall management center (fmc), secure firewall threat defense (ftd) software +1 moreCisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability8.3 High
- fermax electronica s.a.u. duox plus monitor firmware (veo wi-fi range)Improper Certificate Validation in the Firmware Download vulnerability7.7 High
- devolutions serverImproper certificate validation on LDAPS connections to Active Directory in Devolutions Server...8.3 High
- devolutions serverImproper certificate validation in the shared HTTP client used by synchronization and integration...4.8 Medium
- apple macosA certificate validation issue was addressed with improved certificate validation. This issue is...4.8 Medium
- apple ipados, macos, tvos +4 more +6 moreA certificate validation issue was addressed with improved certificate validation. This issue is...9.1 Critical
- andreashappe cochiseandreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation6.3 Medium
- socket firewallSocket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not...8.1 High
- kalkitech ase2000 v2 communication test setASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper...9.1 Critical
- cisa malcolmImproper certificate validation in Malcolm6.0 Medium
- drupal saml sso - service providerSAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-1424.8 Medium
- red hat ceph storage 5, ceph storage 9, openstack platform 17.1 +1 more +3 moreCommunity.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure6.8 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...3.7 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...3.7 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...3.7 Low
- dell secure connect gateway, secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application +2 moreDell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an...3.7 Low
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.9 Medium
- checkpoint quantum security gateway, check point multiple products, checkpoint gaia embedded +1 more +3 moreImproper Certificate Validation in Quantum Security Gateway9.8 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.9 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.7 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.6 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...8.2 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.3 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- Show moreLoading…