EUVD-2026-55117

Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered...

CVE-2026-66404

The CVE-2026-66404 issue affects DEEBOT PRO M1 and DEEBOT PRO K1VAC where the MQTT client does not validate server certificates, enabling potential unauthorized access to operation and activity logs stored on the device. The vulnerability is categorized as missing server certificate verification ...

CVE-2026-66404

DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved...

[SECURITY] [DLA 4726-1] ca-certificates CA certificate update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès August 09, 2026 https://wiki.debian.org/LTS -...

Debian dla-4726 : ca-certificates - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4726 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4726-1 [email protected]...

EulerOS 2.0 SP11 : ca-certificates (EulerOS-SA-2026-3116)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

EulerOS 2.0 SP11 : ca-certificates (EulerOS-SA-2026-3061)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

certgraveyard_yara v2026.08.07

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

...

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...

MGASA-2026-0325 Updated rootcerts, nss & firefox packages fix security vulnerabilities

Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the HostnameError.Error function. This flaw, caused by unbounded string concatenation, leads to excessive resource...

certgraveyard_yara v2026.08.06

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

kernel security, bug fix, and enhancement update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

kernel security, bug fix, and enhancement update

5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

kernel security, bug fix, and enhancement update

4.18.0-553.153.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

EulerOS 2.0 SP15 : ca-certificates (EulerOS-SA-2026-2918)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-2960)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...

EulerOS 2.0 SP13 : ca-certificates (EulerOS-SA-2026-3010)

According to the versions of the ca-certificates package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity o...