CVE-2026-120250

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/emailutils.py and utils/emaildebug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS. Network-positioned attackers can present a forged certificate to intercept SMTP...

CVE-2026-120250

The software OpenAlgo versions 1.0.0.29 before 2.0.3.1 is vulnerable to improper certificate validation in utils/email_utils.py and utils/email_debug.py. The root cause is the disabling of TLS hostname and certificate checks for STARTTLS and SMTPS connections. This allows network-positioned attac...

CVE-2026-120250 OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/emailutils.py and utils/emaildebug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS. Network-positioned attackers can present a forged certificate to intercept SMTP...

EUVD-2026-114747

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/emailutils.py and utils/emaildebug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS. Network-positioned attackers can present a forged certificate to intercept SMTP...

CVE-2026-120250: marketcalls OpenAlgo: OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/email_utils.py and…

OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper certificate validation vulnerability in utils/emailutils.py and utils/emaildebug.py that disables TLS hostname and certificate checks for STARTTLS and SMTPS. Network-positioned attackers can present a forged certificate to intercept SMTP...