Skip to content
OpenAdvisories

Vendor

aria2_project

1 known vulnerabilities.

Products

aria2c 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-8367

    aria2c Improper Certificate Validation

    aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

    aria2_project aria2c aria2 aria2 Debian Ubuntu