CVE-2026-73253: Improper Certificate Validation

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...

CVE-2025-65830

The Meatmeet Pro App (version v1.1.2.0 ) is vulnerable to traffic interception due to a lack of certificate validation . An adversary positioned upstream can decrypt and modify TLS traffic, potentially leading to a total compromise of the user's account by capturing active authentication tokens o...