CVE-2026-103502

A flaw was found in hexcore. A network attacker capable of intercepting network traffic can impersonate remote package repositories and Application Programming Interface API servers due to improper certificate validation in the default HTTP adapter. When certificate verification cannot be complet...