CWE-299 · Cryptography
Improper Check for Certificate Revocation
24CVEs
SortMost likely exploited
24 CVEs with CWE-299 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-0853OCSP verification bypass with TLS session reusecurl · curl · CVSS 5.3 · 2024-02-03 | 5.3 | 1.1% | 2024-02-03 |
| CVE-2020-1675Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.Juniper Networks · MIST Cloud UI · CVSS 8.3 · 2020-10-16 | 8.3 | 0.6% | 2020-10-16 |
| CVE-2026-115557Distrust compromised intermediate certificates in ssl modulePython Software Foundation · CPython · CVSS 9.4 · 2026-10-24 | 9.4 | 0.5% | 2026-10-24 |
| CVE-2026-61699nebula-mesh: Certificate revocation is never enforced at the meshforgekeep · nebula-mesh · CVSS 8.1 · 2026-09-04 | 8.1 | 0.4% | 2026-09-04 |
| CVE-2026-86231mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocationmwiede · jsch · CVSS 3.7 · 2026-09-06 | 3.7 | 0.4% | 2026-09-06 |
| CVE-2026-111943Distrust compromised intermediate certificates in crypto/x509Go standard library · crypto/x509 · CVSS 6.8 · 2026-10-21 | 6.8 | 0.4% | 2026-10-21 |
| CVE-2026-115570Electron: Mitigation for compromised eMudhra intermediate certificateselectron · electron · CVSS 7.4 · 2026-10-23 | 7.4 | 0.4% | 2026-10-23 |
| CVE-2020-16228Philips Patient Monitoring Devices Improper Check for Certificate RevocationPhilips · Patient Information Center iX (PICiX) · 2020-09-11 | – | 0.4% | 2020-09-11 |
| CVE-2026-102221Secure Boot Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 4.4 · 2026-10-13 | 4.4 | 0.4% | 2026-10-13 |
| CVE-2026-109462Azure Firmware Security Feature Bypass VulnerabilityMicrosoft · Azure Virtual Machines · CVSS 4.4 · 2026-11-10 | 4.4 | 0.3% | 2026-11-10 |
| CVE-2025-3085MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedMongoDB Inc · MongoDB Server · CVSS 8.1 · 2025-04-01 | 8.1 | 0.3% | 2025-04-01 |
| CVE-2026-118696In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.…JetBrains · IntelliJ IDEA · CVSS 8 · 2026-10-30 | 8.0 | 0.3% | 2026-10-30 |
| CVE-2026-4428CRL Distribution Point Scope Check Logic Error in AWS-LCAWS · AWS-LC · CVSS 7.4 · 2026-03-19 | 7.4 | 0.3% | 2026-03-19 |
| CVE-2023-23690Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific priv…Dell · Cloud Mobility for Dell Storage · CVSS 7 · 2023-01-19 | 7.0 | 0.3% | 2023-01-19 |
| CVE-2026-56821Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidatornetty · netty · CVSS 7.4 · 2026-07-28 | 7.4 | 0.2% | 2026-07-28 |
| CVE-2026-93493Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate fieldRed Hat · Red Hat build of Apache Camel for Spring Boot 4 · CVSS 5.9 · 2026-09-18 | 5.9 | 0.2% | 2026-09-18 |
| CVE-2026-9636Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List VulnerabilityRockwell Automation · ControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5… · CVSS 8.2 · 2026-07-14 | 8.2 | 0.2% | 2026-07-14 |
| CVE-2025-11955Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows EnterpriseTheGreenBow · TheGreenBow VPN Client Windows Enterprise · CVSS 8.2 · 2025-10-27 | 8.2 | 0.2% | 2025-10-27 |
| CVE-2025-36057IBM Cognos Analytics Mobile (iOS) authentication bypassIBM · Cognos Analytics Mobile · CVSS 5.2 · 2025-07-21 | 5.2 | 0.2% | 2025-07-21 |
| CVE-2026-93602rustls-webpki before 0.103.10 CRL Revocation Check Bypassrustls · webpki · CVSS 4.4 · 2026-09-18 | 4.4 | 0.2% | 2026-09-18 |
| CVE-2026-94417CRL check skipped when OCSP enabled and certificate has no OCSP URLwolfSSL · wolfSSL · CVSS 2.3 · 2026-09-27 | 2.3 | 0.2% | 2026-09-27 |
| CVE-2026-73581Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystoreApache Software Foundation · Apache Tomcat · CVSS 6.5 · 2026-09-23 | 6.5 | 0.2% | 2026-09-23 |
| CVE-2024-56138Timestamp signature generation lacks certificate revocation check in notion-gonotaryproject · notation-go · CVSS 4 · 2025-01-13 | 4.0 | 0.1% | 2025-01-13 |
| CVE-2026-6899Improper Check for Certificate Revocation in S2OPCSysterel · S2OPC · CVSS 5.6 · 2026-06-09 | 5.6 | 0.1% | 2026-06-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.