Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate...

CVE-2026-117666

Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary

来源摘录 · NVD

Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or...

CVE-2026-66392

Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, b

来源摘录 · NVD

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redi...

CVE-2026-86410

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly u

来源摘录 · NVD

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A ...

CVE-2026-85974

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS c

历史摘要 · 未重新核验 · NVD

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Co...

CVE-2026-107819

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1

历史摘要 · 未重新核验 · NVD

MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

CVE-2026-107819

MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1

历史摘要 · 未重新核验 · OSV.dev

Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks

### Summary Pinning a CA certificate via `pinnedPeerCertSha256` can lead to the success of MITM attacks in some cases.

历史摘要 · 未重新核验 · GitHub Advisory

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSo...

CVE-2026-85088

Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries ins

历史摘要 · 未重新核验 · NVD

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat...

CVE-2026-102669

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.

历史摘要 · 未重新核验 · GitHub Advisory

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.

CVE-2026-102669

Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.

历史摘要 · 未重新核验 · NVD

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can vali...

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri

历史摘要 · 未重新核验 · NVD

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

CVE-2026-63374

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Pri

历史摘要 · 未重新核验 · OSV.dev

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src...

CVE-2026-84975

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuT

历史摘要 · 未重新核验 · NVD

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

CVE-2026-63374

### Impact Services using internationalized (non-ASCII) domain names are potentially vulnerable to TLS connections made

历史摘要 · 未重新核验 · GitHub Advisory

PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

CVE-2026-84975

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuT

历史摘要 · 未重新核验 · OSV.dev

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might ...

CVE-2026-92943

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for

历史摘要 · 未重新核验 · NVD

Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

CVE-2026-92943

Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for

历史摘要 · 未重新核验 · OSV.dev

Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=...

CVE-2026-59969

Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, z

历史摘要 · 未重新核验 · NVD

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information d...

CVE-2026-84393

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProx

历史摘要 · 未重新核验 · NVD

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-79943

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory