<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-299</title><description>Every new CWE-299 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-118696: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…</title><link>https://agentprime.io/advisories/CVE-2026-118696/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118696/</guid><description>CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 17:31:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-115557: Distrust compromised intermediate certificates in ssl module</title><link>https://agentprime.io/advisories/CVE-2026-115557/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-115557/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 24 Oct 2026 14:15:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>Electron: Mitigation for compromised eMudhra intermediate certificates</title><link>https://agentprime.io/advisories/GHSA-jr5w-w6x2-84p9/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-jr5w-w6x2-84p9/</guid><description>electron &lt;42.11.16 || &gt;=43.0.0-alpha.1, &lt;43.8.1 || &gt;=44.0.0-alpha.1, &lt;44.9.1 || &gt;=45.0.0-alpha.1, &lt;45.0.0-beta.6, fixed in 42.11.16, 43.8.1, 44.9.1, 45.0.0-beta.6. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 20:53:41 GMT</pubDate><category>npm</category><category>electron</category></item><item><title>Distrust compromised intermediate certificates in crypto/x509</title><link>https://agentprime.io/advisories/GO-2026-6809/</link><guid isPermaLink="true">https://agentprime.io/advisories/GO-2026-6809/</guid><description>stdlib &lt;1.26.10 || &gt;=1.27.0-0, &lt;1.27.3, fixed in 1.26.10, 1.27.3. CVSS 6.8 (Medium). Published by OSV. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 00:27:29 GMT</pubDate><category>Go</category><category>stdlib</category></item><item><title>CVE-2026-102221: Secure Boot Security Feature Bypass Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-102221/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102221/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:01:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94417: CRL check skipped when OCSP enabled and certificate has no OCSP URL</title><link>https://agentprime.io/advisories/CVE-2026-94417/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94417/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 27 Sep 2026 09:00:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73581: Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore</title><link>https://agentprime.io/advisories/CVE-2026-73581/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73581/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 11:08:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-93493: Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field</title><link>https://agentprime.io/advisories/CVE-2026-93493/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93493/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Sep 2026 08:01:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86231: mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation</title><link>https://agentprime.io/advisories/CVE-2026-86231/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86231/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 06 Sep 2026 22:45:12 GMT</pubDate><category>CVE</category></item><item><title>Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator</title><link>https://agentprime.io/advisories/GHSA-g7hg-vrcf-mvmr/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g7hg-vrcf-mvmr/</guid><description>io.netty:netty-handler-ssl-ocsp &gt;=4.2.0.Final, &lt;4.2.16.Final || &lt;4.1.136.Final, fixed in 4.2.16.Final, 4.1.136.Final. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Jul 2026 21:46:39 GMT</pubDate><category>Maven</category><category>io.netty:netty-handler-ssl-ocsp</category></item><item><title>nebula-mesh: Certificate revocation is never enforced at the mesh</title><link>https://agentprime.io/advisories/GHSA-cm26-5974-52h8/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-cm26-5974-52h8/</guid><description>github.com/forgekeep/nebula-mesh &lt;0.7.1, fixed in 0.7.1. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 20:28:18 GMT</pubDate><category>Go</category><category>github.com/forgekeep/nebula-mesh</category></item><item><title>CVE-2026-9636: Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-9636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9636/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Jul 2026 15:11:42 GMT</pubDate><category>CVE</category></item><item><title>Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks</title><link>https://agentprime.io/advisories/GHSA-8f6j-263m-g72x/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-8f6j-263m-g72x/</guid><description>app-store-server-library &gt;=0.2.0, &lt;3.1.2, fixed in 3.1.2. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jul 2026 23:49:14 GMT</pubDate><category>PyPI</category><category>app-store-server-library</category></item><item><title>CVE-2026-6899: Improper Check for Certificate Revocation in S2OPC</title><link>https://agentprime.io/advisories/CVE-2026-6899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6899/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 08:39:00 GMT</pubDate><category>CVE</category></item><item><title>sequoia-git has broken hard revocation handling</title><link>https://agentprime.io/advisories/GHSA-g27r-r6ph-vf5r/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g27r-r6ph-vf5r/</guid><description>sequoia-git &lt;0.6.0, fixed in 0.6.0. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 04 May 2026 22:28:50 GMT</pubDate><category>crates.io</category><category>sequoia-git</category></item><item><title>CRL Distribution Point Scope Check Logic Error in AWS-LC</title><link>https://agentprime.io/advisories/GHSA-9f94-5g5w-gf6r/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-9f94-5g5w-gf6r/</guid><description>aws-lc-fips-sys &gt;=0.13.0, &lt;0.13.13, fixed in 0.13.13. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 20:35:14 GMT</pubDate><category>crates.io</category><category>aws-lc-fips-sys</category><category>aws-lc-sys</category><category>critical</category></item><item><title>CRLs not considered authoritative by Distribution Point due to faulty matching logic</title><link>https://agentprime.io/advisories/GHSA-pwjx-qhcg-rvj4/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pwjx-qhcg-rvj4/</guid><description>rustls-webpki &gt;=0.102.0-alpha.0, &lt;0.103.10, fixed in 0.103.10. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 20 Mar 2026 12:00:00 GMT</pubDate><category>crates.io</category><category>rustls-webpki</category></item><item><title>CVE-2025-11955: Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise</title><link>https://agentprime.io/advisories/CVE-2025-11955/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11955/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 Oct 2025 11:30:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-36057: IBM Cognos Analytics Mobile (iOS) authentication bypass</title><link>https://agentprime.io/advisories/CVE-2025-36057/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-36057/</guid><description>CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Jul 2025 18:10:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3085: MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked</title><link>https://agentprime.io/advisories/CVE-2025-3085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3085/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 01 Apr 2025 12:05:05 GMT</pubDate><category>CVE</category></item><item><title>notation-go&apos;s timestamp signature generation lacks certificate revocation check</title><link>https://agentprime.io/advisories/GHSA-45v3-38pc-874v/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-45v3-38pc-874v/</guid><description>github.com/notaryproject/notation-go &gt;=1.2.0-beta.1, &lt;1.3.0-rc.2, fixed in 1.3.0-rc.2. CVSS 4.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Jan 2025 16:14:07 GMT</pubDate><category>Go</category><category>github.com/notaryproject/notation-go</category></item><item><title>CVE-2023-23690: Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability.</title><link>https://agentprime.io/advisories/CVE-2023-23690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23690/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 19 Jan 2023 11:25:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-1675: Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.</title><link>https://agentprime.io/advisories/CVE-2020-1675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-1675/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2020 20:31:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-16228: Philips Patient Monitoring Devices Improper Check for Certificate Revocation</title><link>https://agentprime.io/advisories/CVE-2020-16228/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-16228/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Sep 2020 12:58:13 GMT</pubDate><category>CVE</category></item></channel></rss>