Skip to content
OpenAdvisories

Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

  1. Architecture and Design, Implementation

    Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-85102 Exploited Public exploit EPSS 54%

    Improper Certificate Validation in Quantum Security Gateway

    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway.

    Check Point Quantum Security Gateway Network devices
    KEV Sep 22, 2026