Advisories · Technology

linuxdeepin deepin-deepinid-plugin.

Every CVE that names linuxdeepin deepin-deepinid-plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-35207 CVE record

CVSS 5.4 Medium

deepinid plugin in dde-control-center is configured to skip TLS certificate verification when downloading avatar from remote server
- linuxdeepin dde-control-center
- linuxdeepin deepin-deepinid-plugin
- Weak cryptography or TLS
Not analysed yet 9 Apr 2026