CWE-295

1,453 vulnerabilities with CWE-295

CVE-2026-45388 CRITICAL

OCaml-TLS < 2.1.0 - Certificate Validation Bypass via Insufficient KeyUsage Checks

CVSS 9.1

CVE-2026-45170 HIGH

Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation

CVSS 8.8

CVE-2026-45175 HIGH

Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes

CVSS 7.8

CVE-2026-40992 MEDIUM

Mail Auto-Configuration Does Not Enable SSL Hostname Verification

CVSS 5.0

CVE-2026-53475 CRITICAL

Assisted-migration-agent: tls verification disabled on all vcenter connections

CVSS 9.3

CVE-2026-9758 HIGH

Improper Certificate Validation in S2OPC

CVSS 7.3

CVE-2026-41714 MEDIUM

In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager

CVSS 4.0

CVE-2026-42769 MEDIUM

Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

CVSS 5.3

CVE-2026-50752 HIGH

Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1

CVSS 7.4

CVE-2026-45745 HIGH

Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft

CVSS 8.0

CVE-2026-44393 HIGH

OpenStack oslo.messaging 1.0.0-17.3.0 - Man-in-the-Middle Attack via Missing TLS Hostname Verification

CVSS 7.4

CVE-2026-41859 HIGH

Cloud Foundry Foundation Bosh < 282.1.9 - Improper Certificate Validation

CVSS 7.8

CVE-2026-49267 MEDIUM

Apache Airflow: No certificate validation on SMTP STARTTLS connections

CVSS 5.9

CVE-2026-47074 HIGH

ex_aws_sns SigningCertURL not validated in verify_message/1

CVE-2026-42790 HIGH

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

CVSS 8.1

CVE-2026-42791 LOW

OCSP responder certificate validity period not checked in public_key

CVSS 3.7

CVE-2026-42789 MEDIUM

Non-CA certificate accepted as intermediate issuer in public_key path validation

CVSS 4.8

CVE-2026-45574 HIGH

epa4all-client: TLS Certificate Validation Disabled in Production

CVSS 8.1

CVE-2026-44900 HIGH

epa4all-client: VAU Signature bypass

CVSS 8.1

CVE-2026-44213 MEDIUM

OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured

CVSS 6.5

CVE-2026-42013 HIGH

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

CVSS 8.2

CVE-2026-42012 HIGH

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

CVSS 7.1

CVE-2026-48697 HIGH

FastNetMon Community Edition <= 1.2.9 - Missing TLS Certificate Validation in execute_web_request_secure

CVSS 7.4

CVE-2026-9058 CRITICAL

Improper Certificate Verification in Szafir SDK

CVE-2026-32253 CRITICAL

Sunshine: Authentication bypass via improper client certificate validation

CVSS 9.8