CWE-599 · Cryptography
Missing Validation of OpenSSL Certificate
13CVEs
SortMost likely exploited
13 CVEs with CWE-599 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-31105Argo CD's certificate verification is skipped for connections to OIDC providersargoproj · argo-cd · CVSS 8.3 · 2022-07-12 | 8.3 | 0.8% | 2022-07-12 |
| CVE-2024-40464An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go fileBeego · Beego · CVSS 8.8 · 2024-07-31 | 8.8 | 0.6% | 2024-07-31 |
| CVE-2023-48052Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.Httpie · Httpie · CVSS 7.4 · 2023-11-16 | 7.4 | 0.3% | 2023-11-16 |
| CVE-2024-41265A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.No vendor recorded · CVSS 7.5 · 2024-08-01 | 7.5 | 0.3% | 2024-08-01 |
| CVE-2026-25060OpenList Insecure TLS Default ConfigurationOpenListTeam · OpenList · CVSS 8.1 · 2026-02-02 | 8.1 | 0.3% | 2026-02-02 |
| CVE-2025-56230Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.Tencent · Docs · CVSS 7.5 · 2025-11-04 | 7.5 | 0.2% | 2025-11-04 |
| CVE-2025-12553Server Certificate Verification DisabledAzure Access Technology · BLU-IC2 · CVSS 10 · 2025-10-31 | 10.0 | 0.2% | 2025-10-31 |
| CVE-2025-63432Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS certificate from its update…Xtooltech · Xtool Anyscan · CVSS 4.6 · 2025-11-24 | 4.6 | 0.2% | 2025-11-24 |
| CVE-2025-56146Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.No vendor recorded · CVSS 5.3 · 2025-09-23 | 5.3 | 0.2% | 2025-09-23 |
| CVE-2026-62657Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsNETGEAR · MR70 · CVSS 4.9 · 2026-07-14 | 4.9 | 0.1% | 2026-07-14 |
| CVE-2025-56232GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle (MitM) attack to in…Cdprojekt · Gog Galaxy · CVSS 6.8 · 2025-11-05 | 6.8 | 0.1% | 2025-11-05 |
| CVE-2024-36755D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to downgrade the firmwa…Dlink · Dir-1950 Firmware · CVSS 6.8 · 2024-06-27 | 6.8 | 0.1% | 2024-06-27 |
| CVE-2024-41253goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.No vendor recorded · CVSS 7.1 · 2024-07-31 | 7.1 | 0.1% | 2024-07-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.