CWE-299 · 18 records

Improper Check for Certificate Revocation

CVEs in this class

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-3085No exploit	MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revokedmongodb · mongodb · CWE-299 Pre-auth Auth bypass	Critical9.8	—	0.2%	Apr 1, 2025
36Monitor	CVE-2026-4428No exploit	CRL Distribution Point Scope Check Logic Error in AWS-LCaws · aws-lc · CWE-299 Pre-auth	Critical9.1	—	0.2%	Mar 19, 2026
33Monitor	CVE-2020-1675No exploit	Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.juniper · mist cloud ui · CWE-299 Pre-auth	High8.3	—	0.5%	Oct 16, 2020
32Monitor	CVE-2026-61699No exploit	nebula-mesh: Certificate revocation is never enforced at the meshforgekeep · nebula-mesh · CWE-299	High8.1	—	0.4%	Sep 4, 2026
32Monitor	CVE-2026-9636No exploit	Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerabilityrockwell automation · controllogix® 5580, compactlogix® 5380, guardlogix® 5580, compact guardlogix® 5380, 1756-en4tr · CWE-299 Pre-auth	High8.2	—	0.2%	Jul 14, 2026
32Monitor	CVE-2025-11955No exploit	Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprisethegreenbow · thegreenbow vpn client windows enterprise · CWE-299 Pre-auth	High8.2	—	0.2%	Oct 27, 2025
29Monitor	CVE-2026-56821No exploit	Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidatornetty · netty · CWE-299 Pre-auth	High7.4	—	0.2%	Jul 28, 2026
28Monitor	CVE-2023-23690No exploit	Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability.dell · cloud mobility for dell emc storage · CWE-299 Pre-auth	High7.0	—	0.2%	Jan 19, 2023
26Monitor	CVE-2026-73581No exploit	Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystoreapache software foundation · apache tomcat · CWE-299 Pre-auth	Medium6.5	—	0.1%	Sep 23, 2026
25Monitor	CVE-2020-16228No exploit	Philips Patient Monitoring Devices Improper Check for Certificate Revocationphilips · patient information center ix · CWE-299	Medium6.4	—	0.3%	Sep 11, 2020
23Monitor	CVE-2026-93493No exploit	Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate fieldred hat · red hat build of apache camel for spring boot 4 · CWE-299 Pre-auth	Medium5.9	—	0.2%	Sep 18, 2026
23Monitor	CVE-2026-93602No exploit	rustls-webpki before 0.103.10 CRL Revocation Check Bypassrustls · webpki · CWE-299	Medium5.9	—	0.2%	Sep 18, 2026
22Monitor	CVE-2026-6899No exploit	Improper Check for Certificate Revocation in S2OPCsysterel · s2opc · CWE-299 Pre-auth	Medium5.6	—	0.1%	Jun 9, 2026
18Monitor	CVE-2025-36057No exploit	IBM Cognos Analytics Mobile (iOS) authentication bypassibm · cognos analytics mobile · CWE-299 Auth bypass	Medium4.6	—	0.2%	Jul 21, 2025
17Monitor	CVE-2026-102221No exploit	Secure Boot Security Feature Bypass Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-299	Medium4.4	—	0.3%	4 days ago
16Monitor	CVE-2024-56138No exploit	Timestamp signature generation lacks certificate revocation check in notion-gonotaryproject · notation-go · CWE-299 Denial of service	Medium4.0	—	0.1%	Jan 13, 2025
10Monitor	GHSA-g27r-r6ph-vf5rNo exploit	sequoia-git has broken hard revocation handlingcrates.io · sequoia-git · CWE-299	Low2.5	—	—	May 4, 2026
9Monitor	CVE-2026-94417No exploit	CRL check skipped when OCSP enabled and certificate has no OCSP URLwolfssl · wolfssl · CWE-299	Low2.3	—	0.1%	Sep 27, 2026

CVE-2025-3085
39Monitor
MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
mongodb · mongodbApr 1, 2025
CVE-2026-4428
36Monitor
CRL Distribution Point Scope Check Logic Error in AWS-LC
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
aws · aws-lcMar 19, 2026
CVE-2020-1675
33Monitor
Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
juniper · mist cloud uiOct 16, 2020
CVE-2026-61699
32Monitor
nebula-mesh: Certificate revocation is never enforced at the mesh
HighCVSS 8.1No exploitEPSS 0%
forgekeep · nebula-meshSep 4, 2026
CVE-2026-9636
32Monitor
Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
rockwell automation · controllogix® 5580, compactlogix® 5380, guardlogix® 5580, compact guardlogix® 5380, 1756-en4trJul 14, 2026
CVE-2025-11955
32Monitor
Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
thegreenbow · thegreenbow vpn client windows enterpriseOct 27, 2025
CVE-2026-56821
29Monitor
Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
netty · nettyJul 28, 2026
CVE-2023-23690
28Monitor
Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability.
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
dell · cloud mobility for dell emc storageJan 19, 2023
CVE-2026-73581
26Monitor
Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
apache software foundation · apache tomcatSep 23, 2026
CVE-2020-16228
25Monitor
Philips Patient Monitoring Devices Improper Check for Certificate Revocation
MediumCVSS 6.4No exploitEPSS 0%
philips · patient information center ixSep 11, 2020
CVE-2026-93493
23Monitor
Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026
CVE-2026-93602
23Monitor
rustls-webpki before 0.103.10 CRL Revocation Check Bypass
MediumCVSS 5.9No exploitEPSS 0%
rustls · webpkiSep 18, 2026
CVE-2026-6899
22Monitor
Improper Check for Certificate Revocation in S2OPC
MediumCVSS 5.6No exploitEPSS 0%
- Pre-auth
systerel · s2opcJun 9, 2026
CVE-2025-36057
18Monitor
IBM Cognos Analytics Mobile (iOS) authentication bypass
MediumCVSS 4.6No exploitEPSS 0%
- Auth bypass
ibm · cognos analytics mobileJul 21, 2025
CVE-2026-102221
17Monitor
Secure Boot Security Feature Bypass Vulnerability
MediumCVSS 4.4No exploitEPSS 0%
microsoft · windows 10 version 16074 days ago
CVE-2024-56138
16Monitor
Timestamp signature generation lacks certificate revocation check in notion-go
MediumCVSS 4.0No exploitEPSS 0%
- Denial of service
notaryproject · notation-goJan 13, 2025
GHSA-g27r-r6ph-vf5r
10Monitor
sequoia-git has broken hard revocation handling
LowCVSS 2.5No exploit
crates.io · sequoia-gitMay 4, 2026
CVE-2026-94417
9Monitor
CRL check skipped when OCSP enabled and certificate has no OCSP URL
LowCVSS 2.3No exploitEPSS 0%
wolfssl · wolfsslSep 27, 2026

All vulnerability classes