CWE-295: Improper certificate validation

1,748 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.

Critical 190High 685Medium 788Low 84Not scored 1

CVEs per yearBy the year they were published

CVE-2026-85102
Improper Certificate Validation in Quantum Security Gateway
checkpoint · Quantum Security Gateway
ExploitedCritical9.8
CVE-2023-41991
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass…
Apple · iOS and iPadOS
ExploitedMedium5.5
CVE-2023-20963
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User…
Android
ExploitedHigh7.8
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh8.8
CVE-2022-20703
Cisco Small Business RV Series Routers Vulnerabilities
Cisco · Cisco Small Business RV Series Router Firmware
ExploitedCritical10.0
CVE-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit…
Microsoft · Windows
ExploitedHigh8.1

CVE-2026-14435
IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by a vulnerability
IBM · Turbonomic kubeturbo agent
Medium5.9
CVE-2026-14434
IBM Turbonomic kubeturbo agent used by IBM Turbonomic Application Resource Management is affected by vulnerability
IBM · Turbonomic kubeturbo agent
Medium5.9
CVE-2026-14375
The following vulnerabilities that can affect IBM Storage Scale Install Toolkit are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher
IBM · Storage Scale
Medium5.9
CVE-2026-19129
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.8
CVE-2026-17333
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.0
CVE-2026-17332
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.7
CVE-2026-17309
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
High8.0
CVE-2026-17308
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium6.8
CVE-2026-48057
Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn
randombit · botan
Low2.1
CVE-2026-113618
Improper Server Certificate Validation in ZSIRep Client Library
KAMSOFT · ZSIRep Client Library
Medium5.3