Improper Check for Certificate Revocation

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. OCSP verification bypass with TLS session reuseCVE-2024-0853curl · CVSS 5.3 · 1.1% likely

   The Curl Project3 bounty reports

2. Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.CVE-2020-1675Juniper Networks · CVSS 8.3 · 0.6% likely

   Juniper Networks

3. Distrust compromised intermediate certificates in ssl moduleCVE-2026-115557Python Software Foundation · CVSS 9.4 · 0.5% likely

   Python

4. nebula-mesh: Certificate revocation is never enforced at the meshCVE-2026-61699forgekeep · CVSS 8.1 · 0.4% likely

   Forgekeep

5. mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocationCVE-2026-86231mwiede · CVSS 3.7 · 0.4% likely
6. Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943Go standard library · CVSS 6.8 · 0.4% likelycovered by CyberSIXT

   Go standard library3 articles

7. Electron: Mitigation for compromised eMudhra intermediate certificatesCVE-2026-115570electron · CVSS 7.4 · 0.4% likely

   Electron

8. Philips Patient Monitoring Devices Improper Check for Certificate RevocationCVE-2020-16228Philips · 0.4% likely

   Philips

9. Secure Boot Security Feature Bypass VulnerabilityCVE-2026-102221Microsoft · CVSS 4.4 · 0.4% likely

   Microsoft

10. Azure Firmware Security Feature Bypass VulnerabilityCVE-2026-109462Microsoft · CVSS 4.4 · 0.3% likely

    Microsoft

11. MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedCVE-2025-3085MongoDB Inc · CVSS 8.1 · 0.3% likely

    MongoDB

12. In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.…CVE-2026-118696JetBrains · CVSS 8 · 0.3% likelycovered by CyberSIXT

    JetBrains1 article

13. CRL Distribution Point Scope Check Logic Error in AWS-LCCVE-2026-4428AWS · CVSS 7.4 · 0.3% likely

    AWS

14. Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific priv…CVE-2023-23690Dell · CVSS 7 · 0.3% likely

    Dell

15. Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidatorCVE-2026-56821netty · CVSS 7.4 · 0.2% likely

    Netty

16. Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate fieldCVE-2026-93493Red Hat · CVSS 5.9 · 0.2% likely

    Red Hat1 bounty report

17. Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List VulnerabilityCVE-2026-9636Rockwell Automation · CVSS 8.2 · 0.2% likely

    Rockwell Automation

18. Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows EnterpriseCVE-2025-11955TheGreenBow · CVSS 8.2 · 0.2% likely
19. IBM Cognos Analytics Mobile (iOS) authentication bypassCVE-2025-36057IBM · CVSS 5.2 · 0.2% likely

    IBM

20. rustls-webpki before 0.103.10 CRL Revocation Check BypassCVE-2026-93602rustls · CVSS 4.4 · 0.2% likely

    Rustls Project

21. CRL check skipped when OCSP enabled and certificate has no OCSP URLCVE-2026-94417wolfSSL · CVSS 2.3 · 0.2% likely

    wolfSSL

22. Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystoreCVE-2026-73581Apache Software Foundation · CVSS 6.5 · 0.2% likely

    Apache

23. Timestamp signature generation lacks certificate revocation check in notion-goCVE-2024-56138notaryproject · CVSS 4 · 0.1% likely

    Notaryproject

24. Improper Check for Certificate Revocation in S2OPCCVE-2026-6899Systerel · CVSS 5.6 · 0.1% likely

    Systerel

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.