Advisories · Weakness

CWE-599.

Every Advisory and CVE whose sources give the weakness CWE-599, newest first.

CVE-2026-62657 CVE record

CVSS 4.9 Medium

Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
- NETGEAR MR70
- NETGEAR MS70
- CWE-599
Not analysed yet 14 Jul 2026
sagemaker PyPI

CVSS 8.2 High

SageMaker Python SDK has Insecure TLS Configuration
- Weak cryptography or TLS
- CWE-599
<2.256.0 || >=3.0, <3.1.1 · fixed in 2.256.0, 3.1.1

GHSA-62rc-f4v9-h543 · CVE-2026-1778 Not analysed yet 2 Feb 2026
github.com/OpenListTeam/OpenList/v4 Go

CVSS 8.1 High

OpenList has Insecure TLS Default Configuration
- CWE-599
<4.1.10 · fixed in 4.1.10

GHSA-wf93-3ghh-h389 · CVE-2026-25060 Not analysed yet 2 Feb 2026
CVE-2025-63432 CVE record

CVSS 4.6 Medium

Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.
- CWE-599
Not analysed yet 24 Nov 2025
CVE-2025-56232 CVE record

CVSS 6.8 Medium

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation.
- CWE-599
Not analysed yet 5 Nov 2025
CVE-2025-56230 CVE record

CVSS 7.5 High

Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
- CWE-599
Not analysed yet 4 Nov 2025
CVE-2025-12553 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Server Certificate Verification Disabled
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-599
Not analysed yet 31 Oct 2025
CVE-2025-56146 CVE record

CVSS 5.3 Medium

Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.
- CWE-599
Not analysed yet 23 Sept 2025
github.com/argoproj/argo-cd +1 Go

CVSS 8.3 High

Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd
- Weak cryptography or TLS
- CWE-599
>=0.4.0 · no fixed version yet

GHSA-7943-82jg-wmw5 · CVE-2022-31105 Not analysed yet 21 Aug 2024
github.com/cortexlabs/cortex Go

CVSS 7.5 High

cortex establishes TLS connections with `InsecureSkipVerify` set to `true` in github.com/cortexproject/cortex
- CWE-599
* · no fixed version yet

GHSA-vw7g-3cc7-7rmh · CVE-2024-41265 Not analysed yet 6 Aug 2024
github.com/beego/beego/v2 Go

CVSS 8.8 High

Beego privilege escalation vulnerability
- Weak cryptography or TLS
- CWE-599
<2.2.1 · fixed in 2.2.1

GHSA-r6qh-j42j-pw64 · CVE-2024-40464 Not analysed yet 31 Jul 2024
CVE-2024-41253 CVE record

CVSS 7.1 High

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.
- CWE-599
Not analysed yet 31 Jul 2024
CVE-2024-36755 CVE record

CVSS 6.8 Medium

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL.
- CWE-599
Not analysed yet 27 Jun 2024
httpie PyPI

CVSS 7.4 High

HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack
- Weak cryptography or TLS
- CWE-599
<3.2.3 · fixed in 3.2.3

GHSA-8r96-8889-qg2x · CVE-2023-48052 Not analysed yet 16 Nov 2023
CVE-2021-21374 CVE record

CVSS 8.1 High

Nimble fails to validate certificates due to insecure httpClient defaults
- nim-lang security
- CWE-348
- CWE-349
Not analysed yet 26 Mar 2021