Skip to content
OpenAdvisories

Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

  1. Architecture and Design, Implementation

    Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-112816 Public exploit

    Improper certificate validation in the HTTPS listener in LXD

    Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed v…

    Canonical LXD lxd Debian
  • Critical 9.1
    CVE-2026-86881 Public exploit

    A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.8
    CVE-2026-85102 Exploited Public exploit EPSS 54%

    Improper Certificate Validation in Quantum Security Gateway

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    checkpoint Quantum Security Gateway Network devices
    KEV Sep 22, 2026
  • Critical 9.3
    CVE-2026-58062 Public exploit

    Stapled OCSP response accepted without binding to the checked certificate

    In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) a…

    Legion of the Bouncy Castle BC-JAVA BC-LTS-JAVA BC-FJA Debian Ubuntu
  • Critical 9.8
    CVE-2024-49369 Public exploit

    Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections

    Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an atta…

    Icinga icinga2 icinga2 icinga2 Debian Ubuntu
  • Critical 9.8
    CVE-2023-27823 Public exploit EPSS 54%

    An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid c…

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven