Improper Certificate Validation

Netty is vulnerable to Improper Certificate Validation. The vulnerability is due to disabled TLS hostname verification in the SslProvider.OPENSSL client path under specific configurations, which allows a man-in-the-middle attacker to present a certificate issued for a different hostname and...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101269

A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101269 Incorrect session validation for API-uploaded files

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

EUVD-2026-88746

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in process by skipping entire check-in steps. While the specific software or hardware platform is not named in the provided documents, the vulnerability results in an unauthorized bypass of required pr...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-101266 Checkout validation bypass

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and versions prior to 5.36 are vulnerable to an Improper Certificate Validation flaw (CWE-295). An unauthenticated attacker with adjacent network access could exploit this vulnerability to cause information disclosure ,...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

EUVD-2026-88736

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

Improper Certificate Validation

org.apache.sshd, sshd-core is vulnerable to improper certificate validation. The vulnerability is due to the server-side authentication process not validating force-command and verify-required certificate options, which allows an attacker with a specially crafted OpenSSH user certificate to...

CVE-2026-96419

A flaw was found in Wireshark. Due to improper pathname validation during configuration profile imports, an attacker could convince a user to import a maliciously crafted profile. Successful exploitation could allow arbitrary code execution or cause an application crash, resulting in a Denial of...

Check Point CVE-2026-85102 VPN Detect

Detects Check Point Security Gateway / Spark firewall exposure to CVE-2026-85102: improper certificate validation during Site-to-Site or Remote Access VPN negotiation sk1000117. Fingerprints SSL VPN / Mobile Access login surfaces and flags builds before fixed JHF takes. !/usr/bin/env python3 --...

CVE-2026-101278

A flaw was found in OpenDMARC. A remote attacker can supply manipulated domain names to trigger an origin validation error when processing wildcard entries in the Public Suffix List PSL. This flaw affects the domain extraction routine and may allow an attacker to bypass domain verification checks...