EUVD-2026-70974

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85528 Snowflake JDBC Driver auto-configuration account validation permits credential redirection

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85525

This CVE affects the Snowflake Python, Go, JDBC, and Node.js drivers . The root cause is improper OCSP response validation : OCSP responses were not reliably bound to the certificate being validated, and definitive verification failures were treated as transient errors rather than hard failures. ...

EUVD-2026-70972

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

io.github.zoom-dustin-moriarty:zoom-data-fence (1.0.0), net.snowflake:snowflake-ingest-sdk (>=3.1.2-beta.unshaded, <=4.4.2-unshaded) +7 more potentially affected by CVE-2026-85525 via net.snowflake:snowflake-jdbc-thin (>=3.22.0, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =3.22.0, =3.1.2-beta.unshaded, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =1.0.0, =3.4.0 Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +293 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=1.7.11, <=4.7.2)

snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.2, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 and more Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

com.snowflake:snowpark-fips (>=1.2.0, <=1.16.1), com.snowflake:snowpark-fips_2.12 (>=1.17.0, <=1.18.0) +1 more potentially affected by CVE-2026-85525 via net.snowflake:snowflake-jdbc-fips (>=3.13.14, <=3.24.2)

net.snowflake:snowflake-jdbc-fips MAVEN version =3.13.14, =1.2.0, =1.17.0, =1.17.0, =1.18.0 Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

@abaplint/database-snowflake (>=2.7.93, <=2.10.46), @activeboxes/piece-snowflake (0.0.10) +249 more potentially affected by CVE-2026-85525 via snowflake-sdk (>=1.1.4, <=3.1.0)

snowflake-sdk NPM version =1.1.4, =2.7.93, =0.0.1, =0.0.332, =0.0.332, =0.0.1, =0.0.19-beta.2, =0.0.5, =8.0.0, =2.0.0, =3.0.0 - @atscale-ps/ps-utils-dev 3.0.0 - @autohive/cell-snowflake 0.0.10 and more Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...

CVE-2026-85525 Improper OCSP response validation in Snowflake drivers

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-85528: Improper Input Validation

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

PT-2026-85440

Improper input validation of the auto-configuration account identifier in Snowflake JDBC Driver versions 4.2.0 through 4.3.3 allowed a credential-bearing login request to be redirected to an attacker-selected HTTPS endpoint. An attacker able to control the account value could cause the driver to...

CVE-2026-85525: Improper Certificate Validation

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

PT-2026-85439

Name of the Vulnerable Software and Affected Versions Snowflake Python driver affected versions not specified Snowflake Go driver affected versions not specified Snowflake JDBC driver affected versions not specified Snowflake Node.js driver affected versions not specified Description Improper OCS...

McKesson confirms cyber incident after ShinyHunters claims patient-data theft

Healthcare and pharmaceutical-distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and the theft of data. McKesson Corporation is an American healthcare company that distributes pharmaceuticals and provides medical supplies,...

OnionHop v3.8.1

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

cloudquery plugins-destination-snowflake-v5.2.14

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2026-77080

n8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read and write vulnerability in the Snowflake node, which passes free-form Execute Query input, including client-side commands, directly to the Snowflake SDK without applying n8n's file-access restrictions...

CVE-2026-77080

The Snowflake node in n8n passes free-form Execute Query input, including client-side commands, directly to the Snowflake SDK without applying n8n's file-access restrictions, enabling arbitrary file read and write on the n8n host. Affected versions: n8n before 1.123.69, 2.x before 2.33.4, and 2.3...