Skip to content
OpenAdvisories

Vendor

iterate

2 known vulnerabilities.

Products

Cyberduck 2 Mountain Duck 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.0
    CVE-2025-41255

    Cyberduck and Mountain Duck - Improper Certificate Store Handling

    Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions. This issue affects Cyberduck throu…

    iterate Mountain Duck Cyberduck
  • High 7.4
    CVE-2025-41256

    Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint

    Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak. This issue affects Cyberduck: through 9.1.6; Mountain …

    iterate Cyberduck Mountain Duck