Improper Validation of Certificate Expiration

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Pow Mnesia cache doesn't invalidate all expired keys on startupCVE-2023-42446pow-auth · CVSS 6.5 · 0.5% likely
2. Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.CVE-2025-67109Eclipse · CVSS 10 · 0.3% likely

   Eclipse Foundation

3. eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.CVE-2025-67108Eprosima · CVSS 10 · 0.3% likely

   eProsima

4. Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege EscalationCVE-2024-1248WSO2 · CVSS 4.8 · 0.3% likely

   WSO2

5. Infrahub allows authentication with deleted and expired API tokensCVE-2025-59036opsmill · CVSS 5.5 · 0.2% likely
6. Certificate validity not properly verifiedCVE-2025-4384arcinfo · CVSS 6 · 0.1% likely

   Arcinfo

7. iSTAR- Improper Validation of Certificate ExpirationCVE-2025-61736Johnson Controls · CVSS 7.1 · 0.1% likely

   Johnson Controls

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.