CVE-2026-115758

In SumatraPDF version 3.6.1 and earlier for Windows, the HttpGet() function in src/base/Http_win.cpp incorrectly passes the INTERNET_FLAG_IGNORE_CERT_CN_INVALID flag to WinINet . This configuration disables hostname matching for HTTPS update metadata and crash-symbol requests while maintaining ce...