CWE-599 · 10 records
Missing Validation of OpenSSL Certificate
CVEs in this class
10 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-12553No exploit | Server Certificate Verification Disabledazure-access · blu-ic2 firmware · CWE-599 | Critical10.0 | — | 0.2% | Oct 31, 2025 |
32Monitor | CVE-2026-25060No exploit | OpenList Insecure TLS Default Configurationoplist · openlist · CWE-599 | High8.1 | — | 0.2% | Feb 2, 2026 |
30Monitor | CVE-2024-41265No exploit | A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequeCWE-599 | High7.5 | — | 0.2% | Aug 1, 2024 |
30Monitor | CVE-2025-56230No exploit | Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.tencent · docs · CWE-599 | High7.5 | — | 0.2% | Nov 4, 2025 |
28Monitor | CVE-2024-41253No exploit | goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via theCWE-599 | High7.1 | — | 0.1% | Jul 31, 2024 |
27Monitor | CVE-2024-36755No exploit | D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL.dlink · dir-1950 firmware · CWE-599 | Medium6.8 | — | 0.1% | Jun 27, 2024 |
27Monitor | CVE-2025-56232No exploit | GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation.cdprojekt · gog galaxy · CWE-599 | Medium6.8 | — | 0.1% | Nov 5, 2025 |
21Monitor | CVE-2025-56146No exploit | Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.CWE-599 | Medium5.3 | — | 0.1% | Sep 23, 2025 |
19Monitor | CVE-2026-62657No exploit | Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk modelsnetgear · mr70 · CWE-599 | Medium4.9 | — | 0.1% | Jul 14, 2026 |
18Monitor | CVE-2025-63432No exploit | Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.xtooltech · xtool anyscan · CWE-599 | Medium4.6 | — | 0.1% | Nov 24, 2025 |
- CVE-2025-1255340Plan
Server Certificate Verification Disabled
CriticalCVSS 10.0No exploitEPSS 0%azure-access · blu-ic2 firmwareOct 31, 2025
- CVE-2026-2506032Monitor
OpenList Insecure TLS Default Configuration
HighCVSS 8.1No exploitEPSS 0%oplist · openlistFeb 2, 2026
- CVE-2024-4126530Monitor
A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorReque
HighCVSS 7.5No exploitEPSS 0%Aug 1, 2024
- CVE-2025-5623030Monitor
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
HighCVSS 7.5No exploitEPSS 0%tencent · docsNov 4, 2025
- CVE-2024-4125328Monitor
goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the
HighCVSS 7.1No exploitEPSS 0%Jul 31, 2024
- CVE-2024-3675527Monitor
D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL.
MediumCVSS 6.8No exploitEPSS 0%dlink · dir-1950 firmwareJun 27, 2024
- CVE-2025-5623227Monitor
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation.
MediumCVSS 6.8No exploitEPSS 0%cdprojekt · gog galaxyNov 5, 2025
- CVE-2025-5614621Monitor
Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.
MediumCVSS 5.3No exploitEPSS 0%Sep 23, 2025
- CVE-2026-6265719Monitor
Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
MediumCVSS 4.9No exploitEPSS 0%netgear · mr70Jul 14, 2026
- CVE-2025-6343218Monitor
Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation.
MediumCVSS 4.6No exploitEPSS 0%xtooltech · xtool anyscanNov 24, 2025