CWE-296 · Cryptography
Improper Following of a Certificate's Chain of Trust
19CVEs
SortMost likely exploited
19 CVEs with CWE-296 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-44532Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostname…NodeJS · Node · 2022-02-24 | – | 10% | 2022-02-24 |
| CVE-2019-3890It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the us…The Gnome Project · evolution-ews · CVSS 8.1 · 2019-08-01 | 8.1 | 1.0% | 2019-08-01 |
| CVE-2021-1566Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation VulnerabilityCisco · Cisco Web Security Appliance (WSA) · CVSS 7.4 · 2021-06-16 | 7.4 | 0.7% | 2021-06-16 |
| CVE-2019-3762Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentiall…Dell · Data Protection Central · CVSS 7.5 · 2020-03-18 | 7.5 | 0.6% | 2020-03-18 |
| CVE-2021-23155Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Gallag…Gallagher · Command Centre Mobile Client for Android · CVSS 9 · 2021-11-18 | 9.0 | 0.5% | 2021-11-18 |
| CVE-2025-48057Icinga 2 certificate renewal might incorrectly renew an invalid certificateIcinga · icinga2 · CVSS 9.3 · 2025-05-27 | 9.3 | 0.5% | 2025-05-27 |
| CVE-2026-44852Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management InterfaceHewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating System (AOS) · CVSS 7.2 · 2026-05-12 | 7.2 | 0.4% | 2026-05-12 |
| CVE-2021-23162Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command Centre Server. This issue affects: Galla…Gallagher · Command Centre Mobile Connect for Android · CVSS 7.7 · 2021-11-18 | 7.7 | 0.4% | 2021-11-18 |
| CVE-2025-22459Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to intercept limited traffic…Ivanti · Endpoint Manager · CVSS 4.8 · 2025-04-08 | 4.8 | 0.4% | 2025-04-08 |
| CVE-2026-27134Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autenticationstrimzi · strimzi-kafka-operator · CVSS 8.1 · 2026-02-20 | 8.1 | 0.4% | 2026-02-20 |
| CVE-2026-42789Non-CA certificate accepted as intermediate issuer in public_key path validationErlang · OTP · CVSS 8 · 2026-05-27 | 8.0 | 0.4% | 2026-05-27 |
| CVE-2026-96770s2s-proxy accepts untrusted client certificatesTemporal Technologies, Inc. · s2s-proxy · CVSS 9.3 · 2026-09-23 | 9.3 | 0.3% | 2026-09-23 |
| CVE-2025-1146CrowdStrike Falcon Sensor for Linux TLS IssueCrowdStrike · Falcon sensor for Linux · CVSS 8.1 · 2025-02-12 | 8.1 | 0.3% | 2025-02-12 |
| CVE-2024-43196IBM OpenPages data manipulationIBM · OpenPages with Watson · CVSS 4.3 · 2025-02-20 | 4.3 | 0.2% | 2025-02-20 |
| CVE-2026-27133Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clustersstrimzi · strimzi-kafka-operator · CVSS 5.9 · 2026-02-20 | 5.9 | 0.2% | 2026-02-20 |
| CVE-2025-10539Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking AppDeskTime · DeskTime Time Tracking App · CVSS 4.8 · 2026-04-28 | 4.8 | 0.2% | 2026-04-28 |
| CVE-2026-73542Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data transmitted by the prod…SEIKO EPSON CORPORATION · Multiple SEIKO EPSON printers and scanners · CVSS 3.7 · 2026-08-20 | 3.7 | 0.2% | 2026-08-20 |
| CVE-2026-33779Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communicationJuniper Networks · Junos OS · CVSS 6.5 · 2026-04-09 | 6.5 | 0.1% | 2026-04-09 |
| CVE-2026-24066Slate Digital Connect macOS XPC certificate validation privilege escalationSlate Digital LLC · Slate Digital Connect · CVSS 8.4 · 2026-06-10 | 8.4 | 0.1% | 2026-06-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.