CVE-2026-107660

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issu...

PT-2026-108035

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 8.1.3 FFmpeg versions 9.x prior to 9.0.2 Description An improper certificate validation issue exists in the tls open function within libavformat/tls mbedtls.c. The software fails to perform hostname checks when...

CVE-2021-36377: Improper Certificate Validation

Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation...

PT-2021-21259

Name of the Vulnerable Software and Affected Versions Fossil versions prior to 2.14.2 Fossil versions 2.15.x prior to 2.15.2 Description The issue often skips the hostname check during TLS certificate validation. Recommendations For versions prior to 2.14.2, update to version 2.14.2 or later. For...