Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

CVE-2026-55001

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.

历史摘要 · 未重新核验 · NVD

Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-47632

Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adj

历史摘要 · 未重新核验 · NVD

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow att...

CVE-2026-59836

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 thr

历史摘要 · 未重新核验 · NVD

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation...

CVE-2026-15683

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulne

历史摘要 · 未重新核验 · GitHub Advisory

Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks

### Summary `SignedDataVerifier` attempts to perform online revocation checking when `enable_online_checks=True`, but it

历史摘要 · 未重新核验 · GitHub Advisory

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arb...

CVE-2026-15683

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulne

历史摘要 · 未重新核验 · NVD

DIRAC: Pilot code downloaded over unverified HTTPS connection

CVE-2026-61668

### Summary The second stage pilot (pilot.tar) is downloaded by the initial wrapper script without any verification of t

历史摘要 · 未重新核验 · GitHub Advisory

The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided by the server. This allows an attacker on the network path...

CVE-2026-22093

The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not validate the certificate provided b

历史摘要 · 未重新核验 · NVD

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions from 0.31.0 through 0.46.1 and wolfSSL backend versions f...

CVE-2026-54919

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In affected Mbed TLS backend versions

历史摘要 · 未重新核验 · NVD

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an...

CVE-2026-0277

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a ma

历史摘要 · 未重新核验 · GitHub Advisory

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. ...

CVE-2026-0277

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a ma

历史摘要 · 未重新核验 · NVD

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and ...

CVE-2026-59818

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is con

历史摘要 · 未重新核验 · NVD

etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation

CVE-2026-59818

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is con

历史摘要 · 未重新核验 · OSV.dev

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge...

CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and pr

历史摘要 · 未重新核验 · NVD

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

CVE-2026-55436

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and pr

历史摘要 · 未重新核验 · OSV.dev

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

CVE-2026-55436

### Summary The AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVe

历史摘要 · 未重新核验 · GitHub Advisory

Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before R 4.4-01P5.

CVE-2026-6900

Improper certificate validation vulnerability in B&R Industrial Automation GmbH APROL. This issue affects APROL: before

历史摘要 · 未重新核验 · NVD

SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

CVE-2026-49283

## Summary SimpleSAMLphp's HTTP-Artifact receive path can treat an unsigned embedded SAML `Response` as cryptographical

历史摘要 · 未重新核验 · GitHub Advisory

QUIC has Broken TLS verification

CVE-2026-49457

### Impact The QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signatur

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was discovered on Stormshield Network Security 4.3.0  to 4.3.41 (included), 4.4.0 to 4.8.15 (included) , 5.0.2 EA to 5.0.5 (included) A revoked client certifi...

CVE-2026-8480

A vulnerability was discovered on Stormshield Network Security 4.3.0  to 4.3.41 (included), 4.4.0 to 4.8.15 (included) ,

历史摘要 · 未重新核验 · NVD