CVE-2026-113618

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

Elph Mobile Improper Certificate Validation

The vulnerability in the Elph Mobile unified communications platform is related to improper validation of certificate authenticity. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality and integrity of protected information...

EUVD-2026-118269

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

CVE-2026-113618: KAMSOFT ZSIRep Client Library: The ZSIRep client library (ZSIREP.CLIENT.DLL) is vulnerable to improper server certificate validation

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

SUSE CVE-2026-121392

FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tlsverifycertificate that accepts Common Name fallback despite non-matching SAN entries and matches IP literals against DNS strings. Man-in-the-middle attackers holding a certificate from a client-trusted CA can...

CVE-2026-121638

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers...

EUVD-2026-116931

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers...

CVE-2026-121638 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers...

CVE-2026-121638

The WatchGuard AuthPoint Gateway is subject to an Improper Certificate Validation vulnerability (CWE-295). An attacker positioned on-path in the network can exploit this flaw to intercept and modify communications between the AuthPoint Gateway and local authentication providers. The CVSS 4.0 scor...

PT-2026-136983

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers...

CVE-2026-121638: WatchGuard AuthPoint Authentication Gateway: An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path…

An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path network position to intercept and modify communications between the AuthPoint Gateway and local authentication providers...

Linux Distros Unpatched Vulnerability : CVE-2026-121392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.2 contains an improper certificate validation vulnerability in tlsverifycertificate that accepts Common Name fallback despite non-matching S...

CVE-2026-121565

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys...

CVE-2026-121565

Tanium addressed an improper certificate validation vulnerability (CWE-295) affecting multiple products. The root cause involved the use of intermediate CA certificates associated with compromised private keys . To remediate the issue, Tanium updated its products to distrust these specific certif...

CVE-2026-121565 Tanium addressed an improper certificate validation vulnerability in multiple products

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys...

CVE-2026-105031

A flaw was found in qpid-proton. When configuring custom trusted certificates with the OpenSSL Transport Layer Security TLS implementation, the library appends the certificates to default system trust anchors instead of replacing them. This improper certificate validation can allow a remote...

CVE-2026-95764

An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to access sensitive information...

CVE-2026-95763

An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to intercept...

CVE-2026-95761

An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to obtain sensitive information...

CVE-2026-95755

Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept management traffic if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...