EUVD-2026-116099

Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability that allows adjacent attackers to intercept TLS connections by presenting untrusted certificates. Attackers on the same network can terminate and relay the client's TLS session...

CVE-2026-115714

Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...

Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-229)

Improper Certificate Validation in Kibana Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Node.js runtime bundled with Kibana, a dependency of Kibana Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to intercept or modify...