CWE-295 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-295 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2020-0601A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve …89.1%높음8.1● 실제 악용이 확인됨CVE-2022-26923Active Directory Domain Services Elevation of Privilege Vulnerability83.5%높음8.8● 실제 악용이 확인됨CVE-2026-85102Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway…54.1%심각9.8● 실제 악용이 확인됨CVE-2023-41991A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 an…13.4%보통5.5● 실제 악용이 확인됨CVE-2022-20703Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could…9.2%높음8.0● 실제 악용이 확인됨CVE-2023-20963In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege…1.5%높음7.8CVE-2026-105794MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rus…1.0%심각9.1CVE-2026-118147Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing…0.6%높음7.4
전체 목록
120건
CVE-2026-96222Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacke…0.6%높음7.4
CVE-2026-106072A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP end…0.5%보통6.7
CVE-2026-96207Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privile…0.5%심각10.0
CVE-2026-70194Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature…0.4%보통6.5
CVE-2026-83926Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature lo…0.4%보통4.4
CVE-2026-105236Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds …0.4%보통6.3
CVE-2026-112103A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function…0.4%보통6.3
CVE-2026-86131A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows…0.4%심각9.2
CVE-2026-113470Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was dist…0.3%보통5.4
CVE-2026-112105A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpO…0.3%보통6.3
CVE-2026-100118CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.3%높음7.5
CVE-2023-32198A vulnerability has been identified in Steve where by default it was using an insecure option that did not val…0.3%높음8.0
CVE-2026-114406The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages,…0.3%보통6.8
CVE-2026-112816Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.…0.3%심각10.0
CVE-2026-85247Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Cam…0.3%보통5.9
CVE-2026-119559OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote…0.3%높음8.2
CVE-2026-84081IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to imprope…0.3%높음8.1
CVE-2026-118697In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daem…0.3%심각9.0
CVE-2026-106069A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different…0.3%높음7.4
CVE-2026-105483A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenti…0.3%높음7.4
CVE-2026-63697Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A hi…0.3%높음7.6
CVE-2026-107685Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an…0.3%심각9.1
CVE-2026-100665Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QU…0.3%높음8.7
CVE-2026-91881Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vuln…0.3%심각9.0
CVE-2026-93302MatchTrustedPeer ignores the public key used, leading to forged CA clones passing verification. Affected build…0.3%높음8.3
CVE-2026-118682KaringX ClashMi through 1.0.32.1801 disables TLS certificate validation by default in the HttpUtils helper, al…0.3%높음7.7
CVE-2026-63374AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or as…0.3%심각9.3
CVE-2026-115693Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to …0.3%심각9.1
CVE-2026-112106A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f8…0.3%보통6.3
CVE-2026-100123CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.3%높음7.5
CVE-2026-100121CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.3%높음7.5
CVE-2026-100122CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.3%높음7.5
CVE-2026-90623A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect …0.3%낮음2.9
CVE-2026-92744Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrar…0.3%높음8.7
CVE-2026-103921GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the ex…0.3%높음7.4
CVE-2026-85086Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache…0.3%보통6.9
CVE-2026-119190Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.2%높음7.4
CVE-2026-52724Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to…0.2%보통5.8
CVE-2026-117611Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Au…0.2%높음7.1
CVE-2026-61668DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.2…0.2%높음8.1
CVE-2026-103502Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS con…0.2%보통5.9
CVE-2026-115216In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the opera…0.2%심각9.1
CVE-2026-103294CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.2%보통5.9
CVE-2026-100116CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a…0.2%보통5.9
CVE-2026-67231RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The…0.2%심각9.1
CVE-2026-111815Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certific…0.2%높음7.8
CVE-2026-111814Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated w…0.2%높음7.8
CVE-2026-103602Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp b…0.2%높음8.2
CVE-2026-115996A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the …0.2%보통6.3
CVE-2026-97687urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hos…0.2%높음7.6
CVE-2026-114611OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and m…0.2%심각9.1
CVE-2026-18173IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive…0.2%낮음3.7
CVE-2026-67404RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, Whe…0.2%심각9.2
CVE-2026-63577Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.Within…0.2%높음8.2
CVE-2026-93291Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle atta…0.2%심각9.3
CVE-2026-77816IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-…0.2%보통6.5
CVE-2026-82180In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentica…0.2%심각9.5
CVE-2026-84975PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSS…0.2%높음7.4
CVE-2026-95210Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing inv…0.2%심각9.1
CVE-2026-78234A flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the …0.2%심각9.9
CVE-2026-63576Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Ca…0.2%높음8.2
CVE-2026-112006OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate vali…0.2%높음8.3
CVE-2026-100835Contrast before 1.16.0 is susceptible to remote attestation relay attacks. Contrast accepted any TEE attestati…0.2%심각9.1
CVE-2026-85088Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both librar…0.2%보통6.9
CVE-2026-85087Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. T…0.2%보통6.9
CVE-2026-83964Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of…0.2%보통6.2
CVE-2026-78556A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected so…0.2%높음7.6
CVE-2026-84197In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-…0.2%심각9.2
CVE-2026-109399SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_ve…0.2%심각9.2
CVE-2026-114642Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a clie…0.2%높음7.0
CVE-2026-101916@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.…0.2%높음7.4
CVE-2026-106017Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to c…0.2%보통6.3
CVE-2026-89135A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassi…0.2%보통6.3
CVE-2026-81871OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplo…0.2%보통6.3
CVE-2026-15911Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensit…0.2%높음7.4
CVE-2026-79637Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%높음7.7
CVE-2026-105223maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and p…0.2%심각9.1
CVE-2026-114220NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated…0.2%심각9.3
CVE-2026-86889A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macO…0.2%보통4.8
CVE-2026-90651Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TL…0.2%높음8.1
CVE-2026-114047FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that a…0.2%높음7.6
CVE-2026-115929MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. Thi…0.2%높음7.6
CVE-2026-50166Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to…0.2%보통5.5
CVE-2026-105216go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers …0.2%심각9.1
CVE-2026-119118Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers …0.2%높음8.3
CVE-2026-78492Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%높음7.4
CVE-2025-23390A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote se…0.2%보통6.3
CVE-2026-80125Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%보통5.9
CVE-2026-103503Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connecti…0.2%보통5.9
CVE-2026-105222The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default b…0.2%심각9.1
CVE-2026-109245FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request(…0.2%높음7.4
CVE-2026-71885In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bin…0.2%심각9.2
CVE-2026-109383undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.…0.2%높음7.4
CVE-2026-108326Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.0.2%보통6.5
CVE-2026-112037A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unkn…0.2%낮음2.9
CVE-2026-78020Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certifica…0.2%높음7.5
CVE-2026-105221The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path at…0.2%심각9.1
CVE-2026-111459An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certa…0.2%높음7.6
CVE-2026-118780Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.2%낮음3.7
CVE-2026-93600rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alph…0.2%낮음2.1
CVE-2026-93601rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alph…0.2%낮음2.1
CVE-2026-89102In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP …0.2%높음8.3
CVE-2026-100551OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gateway TLS pins in the Control UI.…0.2%심각9.0
CVE-2026-84736In the current development version of Eclipse aeriOS, for which no official release has yet been published, th…0.2%높음8.3
CVE-2026-95208An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows at…0.2%높음7.5
CVE-2026-106036Szafir accepts any client or server certificate without performing certificate and hostname validation, allowi…0.2%보통6.9
CVE-2026-107587Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a r…0.2%보통5.9
CVE-2026-119189Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.2%보통5.9
CVE-2026-78491Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%높음8.2
CVE-2026-81868Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native…0.2%보통6.5
CVE-2026-71889In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKI…0.2%높음8.7
CVE-2026-108185Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated u…0.2%높음7.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.