CWE-296
19 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 19Published CVEs19 of them scored
- 9Last 12 monthspublished in the last year
- 3Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-96770
s2s-proxy accepts untrusted client certificates
Temporal Technologies, Inc. · s2s-proxy
Critical9.3 - CVE-2026-73542
Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data…
SEIKO EPSON CORPORATION · Multiple SEIKO EPSON printers and scanners
Medium6.3 - CVE-2026-24066
Slate Digital Connect macOS XPC certificate validation privilege escalation
Slate Digital LLC · Slate Digital Connect
High8.4 - CVE-2026-42789
Non-CA certificate accepted as intermediate issuer in public_key path validation
Erlang · OTP
High7.0 - CVE-2026-44852
Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface
Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating System (AOS)
High7.2 - CVE-2025-10539
Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App
DeskTime · DeskTime Time Tracking App
Medium4.8 - CVE-2026-33779
Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication
Juniper Networks · Junos OS
High8.3 - CVE-2026-27134
Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication
strimzi · strimzi-kafka-operator
High8.1 - CVE-2026-27133
Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters
strimzi · strimzi-kafka-operator
Medium5.9 - CVE-2025-48057
Icinga 2 certificate renewal might incorrectly renew an invalid certificate
Icinga · icinga2
Critical9.3