CVE-2026-15911-Confluent_Kafka

CVE-2026-15911: Disabled TLS Certificate Verification for HashiCorp Vault KMS in confluent-kafka Severity: High, CVSS 3.1 7.4 Vector v3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected: confluent-kafka = 2.8.0, = 2.14.2 Fixed in: 2.15.0 CWE: CWE-295 Improper Certificate Validation...

CVE-2026-115996

A vulnerability exists in the Unitree Robotics Unitree Go2 (versions up to 1.1.13/1.1.14.1/1.1.15.1) within the chat_go component. The root cause is located in the WebSocketClient.connect function of the websocket.py file, which performs improper certificate validation (CWE-295). An attacker may ...

CVE-2026-107685

Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido reqllm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust...

EUVD-2026-108709

Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido reqllm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust...

CVE-2026-107685 WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido reqllm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust...

EEF-CVE-2026-107685 WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

Summary Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido reqllm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust...

CVE-2026-107685

The agentjido req_llm library (versions 1.9.0 before 1.29.0 ) contains an Improper Certificate Validation vulnerability in its WebSocket streaming client. The ReqLLM.Streaming.WebSocketSession.Client.start/3 function initiates connections using WebSockex without providing TLS options; because Web...

CVE-2026-114047

FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate vali...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-103502

A flaw was found in hexcore. A network attacker capable of intercepting network traffic can impersonate remote package repositories and Application Programming Interface API servers due to improper certificate validation in the default HTTP adapter. When certificate verification cannot be complet...

CVE-2026-114220

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between...

CVE-2026-114220 NewType Infortech｜NT OneAPP - Improper Certificate Validation

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between...

CVE-2026-114220

The NT OneAPP application developed by NewType Infortech is vulnerable to Improper Certificate Validation (CWE-295). The application fails to adequately validate the server certificate and the hostname, which allows unauthenticated network-adjacent attackers to perform man-in-the-middle (MitM) at...

EUVD-2026-108003

NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by failing to validate the server certificate and the hostname, thereby intercepting or modifying communications between...

CVE-2026-96375

Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle AiTM. This issue affects Cloud versions: from 0.0.0 to 7.0.1...

CVE-2026-87944

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87944 SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...

CVE-2026-87944

The Drupal SAML SSO - Service Provider module (versions 0.0.0 through 3.2.0 ) contains an Improper Certificate Validation vulnerability. The root cause is that the module fails to properly validate TLS certificates during outbound HTTPS requests. This allows an Adversary in the Middle (AiTM) to i...

CVE-2026-87944 SAML SSO - Service Provider - Critical - Improper certificate validation - SA-CONTRIB-2026-142

Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle AiTM. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0...