<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-296</title><description>Every new CWE-296 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-96770: s2s-proxy accepts untrusted client certificates</title><link>https://agentprime.io/advisories/CVE-2026-96770/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-96770/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 18:58:46 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor</title><link>https://agentprime.io/advisories/GHSA-6hxq-p678-4hr2/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-6hxq-p678-4hr2/</guid><description>@simplewebauthn/server &lt;13.3.2, fixed in 13.3.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 17:33:20 GMT</pubDate><category>npm</category><category>@simplewebauthn/server</category></item><item><title>CVE-2026-73542: Multiple SEIKO EPSON printers and scanners contain revoked root certificates.</title><link>https://agentprime.io/advisories/CVE-2026-73542/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73542/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Aug 2026 05:16:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24066: Slate Digital Connect macOS XPC certificate validation privilege escalation</title><link>https://agentprime.io/advisories/CVE-2026-24066/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24066/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jun 2026 11:43:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42789: Non-CA certificate accepted as intermediate issuer in public_key path validation</title><link>https://agentprime.io/advisories/CVE-2026-42789/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42789/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 May 2026 12:23:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44852: Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface</title><link>https://agentprime.io/advisories/CVE-2026-44852/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44852/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 18:55:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10539: Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App</title><link>https://agentprime.io/advisories/CVE-2025-10539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10539/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Apr 2026 07:52:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33779: Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication</title><link>https://agentprime.io/advisories/CVE-2026-33779/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33779/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Apr 2026 21:30:56 GMT</pubDate><category>CVE</category></item><item><title>Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster</title><link>https://agentprime.io/advisories/GHSA-gvrj-cjch-728p/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-gvrj-cjch-728p/</guid><description>github.com/juju/juju &lt;=0.0.0-20260401092550-1c1ac1922b57, no fixed version yet. CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Apr 2026 00:03:36 GMT</pubDate><category>Go</category><category>github.com/juju/juju</category><category>critical</category></item><item><title>CVE-2026-27134: Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication</title><link>https://agentprime.io/advisories/CVE-2026-27134/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27134/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 23:05:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27133: Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters</title><link>https://agentprime.io/advisories/CVE-2026-27133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27133/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Feb 2026 22:38:27 GMT</pubDate><category>CVE</category></item><item><title>OpenTofu incorrectly validates excluded subdomain constraint in conjunction with TLS certificates containing wildcard SANs</title><link>https://agentprime.io/advisories/GHSA-mjcp-gpgx-ggcg/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-mjcp-gpgx-ggcg/</guid><description>github.com/opentofu/opentofu &lt;1.10.8, fixed in 1.10.8. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 22:48:08 GMT</pubDate><category>Go</category><category>github.com/opentofu/opentofu</category></item><item><title>Eclipse Jersey has a Race Condition</title><link>https://agentprime.io/advisories/GHSA-7p63-w6x9-6gr7/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-7p63-w6x9-6gr7/</guid><description>org.glassfish.jersey.core:jersey-client &gt;=2.45, &lt;2.46 || &gt;=3.0.16, &lt;3.0.17 || &gt;=3.1.9, &lt;3.1.10, fixed in 2.46, 3.0.17, 3.1.10. CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 18 Nov 2025 18:32:51 GMT</pubDate><category>Maven</category><category>org.glassfish.jersey.core:jersey-client</category><category>critical</category></item><item><title>CVE-2025-48057: Icinga 2 certificate renewal might incorrectly renew an invalid certificate</title><link>https://agentprime.io/advisories/CVE-2025-48057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-48057/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 May 2025 16:32:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-22459: Ivanti Endpoint Manager: Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or…</title><link>https://agentprime.io/advisories/CVE-2025-22459/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-22459/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Apr 2025 14:25:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-43196: IBM OpenPages data manipulation</title><link>https://agentprime.io/advisories/CVE-2024-43196/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43196/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 20 Feb 2025 03:42:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-1146: CrowdStrike Falcon Sensor for Linux TLS Issue</title><link>https://agentprime.io/advisories/CVE-2025-1146/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-1146/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Feb 2025 18:27:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-44532: Node: Node.js &lt; 12.22.9, &lt; 14.18.3, &lt; 16.13.2…</title><link>https://agentprime.io/advisories/CVE-2021-44532/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-44532/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Feb 2022 18:27:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-23162: Gallagher Command Centre Mobile Connect for Android: Improper validation of the cloud certificate chain in Mobile Connect allows…</title><link>https://agentprime.io/advisories/CVE-2021-23162/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-23162/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Nov 2021 17:59:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-23155: Gallagher Command Centre Mobile Client for Android: Improper validation of the cloud certificate chain in Mobile Client allows…</title><link>https://agentprime.io/advisories/CVE-2021-23155/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-23155/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Nov 2021 17:58:23 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-1566: Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-1566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-1566/</guid><description>CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jun 2021 17:45:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-3762: Dell Data Protection Central: Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2…</title><link>https://agentprime.io/advisories/CVE-2019-3762/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3762/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 18 Mar 2020 18:20:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2019-3890: Improper certificate validation in The Gnome Project evolution-ews</title><link>https://agentprime.io/advisories/CVE-2019-3890/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2019-3890/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 01 Aug 2019 13:22:55 GMT</pubDate><category>CVE</category></item></channel></rss>