CVE-2026-89135

A failed X509verifycert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer native TLS, OCSP, CRL, direct CM verify. This affects version 5.8.4 through 5.9.2 of wolfSSL with the macros OPENSSLEXTRA &&...

EUVD-2026-87912

A failed X509verifycert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer native TLS, OCSP, CRL, direct CM verify. This affects version 5.8.4 through 5.9.2 of wolfSSL with the macros OPENSSLEXTRA &&...

InfraTest

AWS を学ぶ目的以外ではデプロイしないでください!!! 現在、CVE-2024-39689 に対して脆弱です。Certifi を更新する必要があります。デプロイ前に dependabot を確認してください。検証されていない認証局を信頼すると、顧客の信頼を大きく損なう可能性があります。...