Weak cryptography or TLS.

Botan: CLI utility `ocsp_check` accepts unauthenticated responses

• randombit botan
• Weak cryptography or TLS

Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags

• unclecode crawl4ai
• Weak cryptography or TLS

Microsoft Edge (Chromium-based) Spoofing Vulnerability

• Microsoft Edge (Chromium-based)
• Weak cryptography or TLS

Improper certificate validation in Szafir

• Krajowa Izba Rozliczeniowa Szafir
• Weak cryptography or TLS

Update bundle signature bypass in Guardian/CMC before 26.4.0

• Nozomi Networks Guardian
• Nozomi Networks CMC
• Weak cryptography or TLS

Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.

• Apache Software Foundation Apache Qpid Proton C
• Weak cryptography or TLS

Trust of compromised eMudhra root CA in bundled CA stores

• Checkmk
• Weak cryptography or TLS
• CWE-1395

The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

• MongoDB Database Tools
• Weak cryptography or TLS

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

• Weak cryptography or TLS

<4.8.3 · fixed in 4.8.3

ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM

• KaringX clashmi
• Weak cryptography or TLS

MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads

• MONAI
• Weak cryptography or TLS

Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured

• Apache Software Foundation Apache Kafka
• Weak cryptography or TLS
• CWE-345

Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing

• Progress Software Telerik Document Processing Libraries
• Weak cryptography or TLS

Improper signature verification in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Weak cryptography or TLS

Improper signature verification in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Weak cryptography or TLS

Improper certificate validation in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Weak cryptography or TLS

Improper signature verification in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Weak cryptography or TLS

Improper signature verification in Acronis Cyber Protect 17

• Acronis Cyber Protect 17
• Weak cryptography or TLS

Weak encryption in Axis Communications AB AXIS Camera Station Pro and others

• Axis Communications AB AXIS Camera Station Pro
• Axis Communications AB AXIS Camera Station 5
• Weak cryptography or TLS

LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()

• OpenBSD LibreSSL
• Weak cryptography or TLS

CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products

• NetApp ONTAP 9
• NetApp StorageGRID (formerly StorageGRID Webscale)
• Weak cryptography or TLS

undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent

• Weak cryptography or TLS

>=4.0.0, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2 · fixed in 6.29.1, 7.30.1, 8.12.2

Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305

• TP-Link Systems Inc. RE305 v3
• Weak cryptography or TLS

Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.

• Tanium Endpoint Configuration Toolset Solution
• Tanium cx-stream
• Weak cryptography or TLS

eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

• HCLSoftware Notes Client
• Weak cryptography or TLS

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

• HCLSoftware Domino Server
• Weak cryptography or TLS

Improper signature verification in Veeam Backup for Microsoft 365

• Veeam Backup for Microsoft 365
• Weak cryptography or TLS

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

• Authentication bypass
• Weak cryptography or TLS

<1.9.1 · fixed in 1.9.1

Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket

• WatchGuard Mobile VPN with SSL Client
• Weak cryptography or TLS

Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys

• Weak cryptography or TLS
• CWE-184

>=1.3.1, <1.9.0 · fixed in 1.9.0

Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts

• Weak cryptography or TLS
• Open redirect

<1.8.0 · fixed in 1.8.0

Authlib: empty signatures validation in JWS JSON deserialization

• Weak cryptography or TLS
• CWE-20

<1.9.0 · fixed in 1.9.0

Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution

• spesmilo electrum
• Weak cryptography or TLS

Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials

• Eclipse Foundation Eclipse ioFog
• Weak cryptography or TLS

Improper certificate validation in Eaton easySoft

• Eaton easySoft
• Weak cryptography or TLS

Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

• Moxa Remote Connect Suite (MRC Client)
• Weak cryptography or TLS

TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass

• TiendaCrypto para WooCommerce
• Weak cryptography or TLS

Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P

• fclairamb ftpserverlib
• Syncplify, Inc. Syncplify Server!
• Weak cryptography or TLS

Improper signature verification in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Weak cryptography or TLS

Improper certificate validation in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Weak cryptography or TLS

Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution

• Forescout Technologies SecureConnector
• Weak cryptography or TLS

ECDSA signature length is not validated in jose, allowing signature malleability

• Weak cryptography or TLS

>=1.0.0, <1.11.13 · fixed in 1.11.13

Weak PBKDF2 parameters for password-encrypted private-key export in jose

• Weak cryptography or TLS

>=1.10.0, <1.11.13 · fixed in 1.11.13

Unauthorized Access to vSolution Matrix RTSP

• WolfVision Cynap Pro, Cynap Core Pro
• Weak cryptography or TLS

IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key

• zephyr
• Weak cryptography or TLS

MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs

• MongoDB, Inc. mongosh
• Weak cryptography or TLS

Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

• Weak cryptography or TLS

>=1.24.0, <4.9.0 · fixed in 4.9.0

Yoosee GM8135S Camera Secure Boot signature verification

• Yoosee GM8135S Camera
• Weak cryptography or TLS
• CWE-345

Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission

• Yoosee GM8135S Camera
• Weak cryptography or TLS
• CWE-310

HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission

• HeyCyan App
• Weak cryptography or TLS
• CWE-310

SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash

• SH3
• Weak cryptography or TLS

Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

• grokability snipe-it
• Weak cryptography or TLS

Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

• grokability snipe-it
• Weak cryptography or TLS

Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url

• rclone
• Weak cryptography or TLS

rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS

• rclone
• Weak cryptography or TLS

SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting

• siyuan
• Weak cryptography or TLS

rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption

• rotki
• Weak cryptography or TLS

Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation

• Unitree Robotics Unitree Go2
• Authentication bypass
• Weak cryptography or TLS

Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others

• Oracle Corporation Oracle Java SE
• Oracle Corporation Oracle GraalVM for JDK
• Weak cryptography or TLS

HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)

• HCL Software BigFix Platform
• Weak cryptography or TLS