CVE-2026-129117

C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows machine-in-the-middle attackers to impersonate Telnet servers because sslreply never calls sslcheckservername. Attackers can refuse START-TLS, offer Telnet AUTHENTICATION SSL, and present any...