CoreTrustDemo

Demo for Linus Henze's CoreTrust bug CVE-2022-26766, CoreTrust allows any root certificate See https://worthdoingbadly.com/coretrust/ for usage...

CVE-2026-108015

The HCL Notes Client is affected by the compromise of private keys for eight eMudhra intermediate CA certificates . This vulnerability impacts the certificate trust mechanism for the software's outbound network request features. An unauthenticated network attacker can exploit this by spoofing ser...

CVE-2026-108015 eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a ma...

CVE-2026-108014

The HCL Domino Server is impacted by a vulnerability arising from the compromise of private keys for eight eMudhra intermediate CA certificates . This breach undermines the trust of certificates used for outbound network requests. An unauthenticated network attacker could exploit this by spoofing...

CVE-2026-108014 eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...

MemorizingTrustManager

MemorizingTrustManager - Private Cloud Support for Your App MemorizingTrustManager MTM is a project to enable smarter and more secure use of SSL on Android. If it encounters an unknown SSL certificate, it asks the user whether to accept the certificate once, permanently or to abort the connection...

Amazon Linux 2023 : docker (ALAS2023-2026-3324)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3324 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2026-3327)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3327 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : docker (ALASECS-2026-150)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-150 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Amazon Linux 2023 : buildah (ALAS2023-2026-3326)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3326 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : skopeo, skopeo-tests (ALAS2023-2026-3325)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3325 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Medium: skopeo

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : golang (ALAS-2026-4043)

The version of golang installed on the remote host is prior to 1.26.10-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4043 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go'...

Amazon Linux 2 : docker (ALASDOCKER-2026-155)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-155 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, th...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2026-129)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-129 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authorit...

Medium: buildah

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...