CVE-2026-63576

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) contains an improper certificate validation vulnerability in the PkixNameConstraintValidator (specifically the ExtractHostFromURL function). The root cause is that the software extracts the host from a URI using st...

EUVD-2026-91227

Improper certificate validation in PkixNameConstraintValidator ExtractHostFromURL in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate CA, or anyone able to obtain certificates with chosen subjectAltName URIs from such a CA, to bypass permitted or...

CVE-2026-67598

CVE-2026-67598 Emlog Pro —— AI 助手中禁用 TLS 证书验证 网络邻近 MITM → LLM 提供商 API 密钥窃取与 AI 响应注入 摘要 · 攻击流程 · 受影响代码 · 验证 · 修复方案 · 时间线 · 参考资料 📋 一览 | ---|--- CVE ID| CVE-2026-67598 产品| emlog/emlog —— Emlog Pro 受影响版本| Emlog Pro 2.6.23 及更早版本 弱点| CWE-295：证书验证不当 CVSS v4.0| 9.1 —— 严重 CVSS v3.1| 7.4 —— 高危 攻击向量| 网络邻近 ·...

msf-remote-console

유지보수 중단됨 이 도구는 더 이상 제가 유지보수하지 않습니다. Rapid7 자체에서 더 나은 대안을 제공하며, 다음과 같이 설명되어 있습니다: Metasploit을 원격으로 실행하는 방법 예시: metasploit-framework 디렉토리 외부에서 msf 명령어를 사용할 수 있도록 하려면 GEMHOME 변수를 설정하세요. 필요한 경로를 찾으려면 metasploit-framework 디렉토리로 cd한 후 다음을 실행하세요: $ rvm gemdir...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

PT-2026-104123

Name of the Vulnerable Software and Affected Versions bc-csharp versions prior to 2.7.0 Description Improper certificate validation occurs in the PkixNameConstraintValidator function. An attacker controlling a name-constrained intermediate CA can cause certificates to be accepted during PKIX...

PT-2026-104135

Improper certificate validation in PkixNameConstraintValidator ExtractHostFromURL in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate CA, or anyone able to obtain certificates with chosen subjectAltName URIs from such a CA, to bypass permitted or...

PT-2026-104136

Improper certificate validation in the directoryName name-constraint check PkixNameConstraintValidator.WithinDNSubtree in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or can have certificates issued by, a name-constrained intermediate CA to get...

CVE-2025-36041

CVE-2025-36041 IBM MQ SSL 绕过利用工具 概述 本仓库包含针对 CVE-2025-36041 的概念验证（PoC）利用代码，该漏洞存在于 IBM MQ（消息队列）中，允许绕过 SSL 证书验证。通过注入伪造的 SSL 证书并使用定制的 MQCONNX 参数，可以建立未经授权的客户端与 IBM MQ 服务器的连接。 功能 SSL 绕过 ：注入伪造的 SSL KeyRepository 以禁用服务器证书验证。 自动化利用 ：打开指定队列并发送测试消息（"Hello MQ"）以确认利用成功。 可定制 ：通过命令行参数指定目标队列管理器、队列名称以及伪造 SSL 仓库的路...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

EUVD-2026-91026

The Joyland AI app accepts any TLS certificates from any server without validation...

CVE-2026-15911

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

CVE-2026-15911

The Confluent Kafka Python client contains a vulnerability in its HashiCorp Vault KMS integration due to a failure to properly validate Transport Layer Security (TLS) certificates by default. A remote attacker capable of intercepting network traffic could exploit this flaw to intercept and decryp...

cve-2026-29145

CVE-2026-29145 — OCSPチェックがソフトフェイル無効時でもソフトフェイルすることがある 発見者: gregk4sec https://github.com/gregk4sec/cve 発見日: 2026-02-26 影響を受けるベンダー: Apache 影響を受ける製品: Tomcat 深刻度: 9.1 CRITICAL CWE: CWE-287 不適切な認証 ステータス: 審査中 / 修正済み / 非公開 / 公開 ✅ 概要 CLIENTCERT認証は、ソフトフェイルが無効になっている一部のシナリオで、期待どおりにOCSPチェックを失敗させませんでした。 技術分析 参...

CVE-2026-103921 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...

CVE-2026-103921 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications using the executor directly, or url-loade...

CVE-2026-103921

The GraphQL Tools library (prior to version 1.1.35 ) contains a vulnerability where the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection to be disabled for Node.js connections to wss:// endpoints. If an application uses this executor directly or uses url-loa...

Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps

Summary Multiple vulnerabilities were addressed in IBM Concert Operate version 5.2.0 Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof...

[SECURITY] [DLA 4809-1] nodejs security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4809-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 01, 2026 https://wiki.debian.org/LTS -...