Lucene search
+L

8 matches found

NVD
NVD
•added 2026/08/25 4:17 p.m.•11 views

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS0.00283EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/25 4:03 p.m.•13 views

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS5.9AI score0.00283EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/25 4:03 p.m.•36 views

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS0.00283EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/25 4:03 p.m.•12 views

EUVD-2026-65595

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS5.4AI score0.00283EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/25 4:03 p.m.•21 views

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification by calling ssl._create_unverified_context() in download_with_retry (within anylabeling/services/auto_labeling/model.py), so neither the certificate chain nor hostname was validated when fetching models over HTTPS. An attacker ...

8.2CVSS5.9AI score0.00283EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/25 4:03 p.m.•11 views

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS5.7AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•2 views

CVE-2026-79785: Improper Certificate Validation

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS5.8AI score0.00283EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•23 views

PT-2026-81392

X-AnyLabeling's model downloader disabled TLS certificate verification. download with retry in anylabeling/services/auto labeling/model.py built a context with ssl. create unverified context and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on...

8.2CVSS5.4AI score0.00283EPSS
SaveExploits0References7
Rows per page
Query Builder