CVE-2026-108326

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension...

CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CVE-2026-108326

Tanium addressed an improper certificate validation vulnerability in the Stream Client Extension . The vulnerability is associated with CWE-295 . Based on the CVSS 3.1 metrics, the issue has a MEDIUM severity with a base score of 6.5 , potentially impacting confidentiality (High) and availability...

EUVD-2026-111250

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension...

CVE-2026-85247

CVE-2026-85247 — camel-knative: improper certificate validation TLS on turns validation off Runnable proof-of-concept reproducer for the Apache Camel vulnerability where enabling SSL on the Knative HTTP client without configuring a truststore fell back to trusting every presented certificate rath...

CVE-2026-111459

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459

An improper certificate validation vulnerability exists in the Moxa Remote Connect Suite (MRC Client) . An unauthenticated attacker with on-path access to the communication between the MRC Client and its server can impersonate a trusted server. This allows for a man-in-the-middle (MITM) attack , ...

EUVD-2026-110617

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

PT-2026-127165

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension...

CVE-2026-115693

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

EUVD-2026-109836

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

CVE-2026-115693

The hackney_ssl component in benoitc hackney (versions 1.24.0 before 4.9.0 ) contains an Improper Certificate Validation vulnerability. The root cause is that hackney_ssl:merge_ssl_opts/3 retains a default partial_chain callback even when a user provides a custom cacerts or cacertfile to pin a pr...

Linux Distros Unpatched Vulnerability : CVE-2026-106017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions...

CVE-2026-115996

A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chatgo. Performing a manipulation results in improper certificate validation. The attack may be initiated...

CVE-2026-115996

A vulnerability exists in the Unitree Robotics Unitree Go2 (versions up to 1.1.13/1.1.14.1/1.1.15.1) within the chat_go component. The root cause is located in the WebSocketClient.connect function of the websocket.py file, which performs improper certificate validation (CWE-295). An attacker may ...

CVE-2026-115996 Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation

A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chatgo. Performing a manipulation results in improper certificate validation. The attack may be initiated...

PT-2026-122669

Name of the Vulnerable Software and Affected Versions Unitree Robotics Unitree Go2 versions 1.1.13, 1.1.14.1, and 1.1.15.1 Description An issue exists in the chat go component within the websocket.py file. Specifically, the WebSocketClient.connect function fails to properly validate TLS server...

CVE-2026-107685

Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido reqllm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust...

CVE-2026-107685

The agentjido req_llm library (versions 1.9.0 before 1.29.0 ) contains an Improper Certificate Validation vulnerability in its WebSocket streaming client. The ReqLLM.Streaming.WebSocketSession.Client.start/3 function initiates connections using WebSockex without providing TLS options; because Web...