Weak cryptography or TLS.

Improper signature verification in Chainguard MinIO

• Chainguard MinIO
• Weak cryptography or TLS

Incorrect validation of TLS certificates in the MatchPoint Android app

• TPC Software Matchpoint
• Weak cryptography or TLS

FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY

• signalwire freeswitch
• Authentication bypass
• Weak cryptography or TLS

FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server

• signalwire freeswitch
• Weak cryptography or TLS
• CWE-300

Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates

• Red Hat AMQ Broker 7
• Red Hat Build of Keycloak
• Weak cryptography or TLS

Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer

• Red Hat AMQ Broker 7
• Red Hat Build of Keycloak
• Weak cryptography or TLS

ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::download

• ModSecurity
• Weak cryptography or TLS

Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Weak cryptography or TLS

vault-java-driver: SslConfig silently disables requested TLS verification

• jopenlibs vault-java-driver
• Weak cryptography or TLS
• CWE-636

Improper certificate validation in Samsung Semiconductor Exynos 1080 and others

• Samsung Semiconductor Exynos 1080
• Samsung Semiconductor Exynos 9110
• Weak cryptography or TLS

Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates

• kyverno
• Weak cryptography or TLS

VitaFit Android < 2.8.1.0 Cleartext Traffic via Missing Network Security Config

• Shenzhen Shine Industrial Co., Ltd. VitaFit
• Weak cryptography or TLS

VitaFit Android < 2.8.1.0 Insecure TLS Certificate Validation

• Shenzhen Shine Industrial Co., Ltd. VitaFit
• Weak cryptography or TLS

GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover

• gpustack
• Authentication bypass
• Weak cryptography or TLS

Multiple vulnerabilities that affects IBM Db2 Genius Hub

• IBM Db2 Genius Hub
• Weak cryptography or TLS

SumatraPDF: TLS hostname validation disabled in `HttpGet()`

• sumatrapdf
• Weak cryptography or TLS

WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks

• WatchGuard AuthPoint Authentication Gateway
• Weak cryptography or TLS

Pay with Vipps and MobilePay for WooCommerce before 6.4.1 Webhook Signature Forgery

• wphostingdev Pay with Vipps and MobilePay for WooCommerce
• Weak cryptography or TLS

Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application

• Tata Motors iRA 2.0
• Tata Motors iRA.ev
• Weak cryptography or TLS

Missing GSDX SignatureValue verification

• Phoenix Contact PLCnext Engineer
• Weak cryptography or TLS

sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready

• zephyr
• Weak cryptography or TLS

Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification

• Qihoo 360 D621-2
• Qihoo 360 D603-2
• Weak cryptography or TLS
• CWE-345

Tanium addressed an improper certificate validation vulnerability in multiple products

• Tanium TanOS
• Tanium Asset
• Weak cryptography or TLS

Weak encryption in Google Chrome

• Google Chrome
• Weak cryptography or TLS

Cleartext transmission of sensitive information in Devolutions Server

• Devolutions Server
• Weak cryptography or TLS

Keycloak has authentication bypass via jwt algorithm confusion

• Weak cryptography or TLS

<26.6.4 · fixed in 26.6.4

Nanosystems Supremo before 5.0.2.3874 Improper TLS Certificate Validation

• Nanosystems Supremo
• Weak cryptography or TLS

Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections

• Elastic Docker images
• Weak cryptography or TLS

Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())

• cotonti
• Weak cryptography or TLS

bbs-go through 4.4.6 Improper TLS Certificate Validation in SMTP Email Service

• mlogclub bbs-go
• Weak cryptography or TLS

FreeRDP before 3.32.2 Certificate Identity Validation Bypass via tls_verify_certificate

• FreeRDP
• Weak cryptography or TLS

Improper signature verification in Dell Alienware Command Center (AWCC)

• Dell Alienware Command Center (AWCC)
• Weak cryptography or TLS

Improper certificate validation in Dell Alienware Command Center (AWCC)

• Dell Alienware Command Center (AWCC)
• Weak cryptography or TLS

Improper signature verification in Dell Alienware Command Center (AWCC)

• Dell Alienware Command Center (AWCC)
• Weak cryptography or TLS

python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key

• mpdavis python-jose
• Weak cryptography or TLS

Improper signature verification in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Weak cryptography or TLS

Improper signature verification in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Weak cryptography or TLS

@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal

• @fastify/secure-session
• Weak cryptography or TLS

Oray Pugongying X5 Pro Session ID session.lua session_get random values

• Oray Pugongying X5 Pro
• Weak cryptography or TLS
• CWE-310

Gitea Actions job token spoofing of instance-signed commits

• Gitea
• Weak cryptography or TLS

OpenAlgo 1.0.0.29 before 2.0.3.1 Improper Certificate Validation in SMTP Connections

• marketcalls OpenAlgo
• Weak cryptography or TLS

Visual Studio Spoofing Vulnerability

• Microsoft Visual Studio 2017 version 15.9
• Microsoft Visual Studio 2019 version 16.11
• Weak cryptography or TLS

Konflux-ci: ui proxy skips backend tls verification on non-openshift clusters, leaking a token that can impersonate anyone

• Weak cryptography or TLS

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

• Weak cryptography or TLS
• CWE-471

<1.4.1 · fixed in 1.4.1

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

• Weak cryptography or TLS
• CWE-436

<1.4.1 · fixed in 1.4.1

AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery

• Weak cryptography or TLS
• Cross-site request forgery (CSRF)

<5.5.1 · fixed in 5.5.1

LightSAML: Signature reference wrapping permits unsigned assertion claims

• litesaml lightsaml
• Weak cryptography or TLS

ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

• Weak cryptography or TLS

>=1.0.1, <1.1.8 · fixed in 1.1.8

Improper certificate validation in JetBrains Toolbox App and others

• JetBrains Toolbox App
• JetBrains IntelliJ IDEA
• Weak cryptography or TLS

Improper certificate validation in the HTTPS listener in LXD

• Canonical LXD
• Weak cryptography or TLS

CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()

• Weak cryptography or TLS

CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key

• Weak cryptography or TLS

CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes

• Weak cryptography or TLS
• CWE-759

Business::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty

• Weak cryptography or TLS

phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

• phpMyAdmin
• Weak cryptography or TLS

OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch

• litespeedtech openlitespeed
• Weak cryptography or TLS

Commerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264

• Drupal Commerce Stripe
• Weak cryptography or TLS

Delinea Privilege Manager agent unauthenticated remote code execution vulnerability

• Delinea Privilege Manager
• Weak cryptography or TLS
• Authentication bypass

Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage

• digitalbazaar forge
• Weak cryptography or TLS

Forge: Certificate signature verified with the issuer's RSA signature scheme

• digitalbazaar forge
• Weak cryptography or TLS