Skip to content
OpenAdvisories

Weakness (CWE)

CWE-298: Improper Validation of Certificate Expiration

Variant Draft

A certificate expiration is not validated or is incorrectly validated.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.

Source: MITRE CWE-298

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-9097

    CVE-2026-9097

    Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken() function in object/token_oauth.go validates the JWT signature and parses its claims, but never queries the Token table to verify…

    Casdoor Casdoor github.com/casdoor/casdoor Go
  • Critical 10.0
    CVE-2025-67109

    Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certific…

  • Critical 10.0
    CVE-2025-67108

    eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure commu…

    fastdds fastdds Debian Ubuntu