Cwe-295 - Improper Certificate Validation - Cwe

Related Threat Clusters

• Critical Check Point VPN Vulnerability Exploited by Ransomware Gang

  Check Point Software Technologies disclosed a critical authentication bypass vulnerability (CVE-2026-50751) affecting its Remote Access VPN and Mobile Access products, with exploitation confirmed since May 7, 2026. The…

  46 articles · Updated June 8, 2026
• Multiple Vulnerabilities in strongSwan Addressed in Recent Updates

  Recent updates for strongSwan, affecting SUSE and Ubuntu systems, have addressed several critical vulnerabilities. The issues include CVE-2026-35328, which can cause an infinite loop in TLS processing, and…

  3 articles · Updated April 28, 2026
• Ivanti EPMM Zero-Day Vulnerability Exploited in Active Attacks

  Ivanti has disclosed a zero-day vulnerability (CVE-2026-6973) in its Endpoint Manager Mobile (EPMM) product, which has been actively exploited by attackers. This flaw allows authenticated users with administrative…

  24 articles · Updated May 7, 2026
• Critical Vulnerabilities in Ivanti EPMM Expose Systems to Remote Attacks

  Two critical vulnerabilities (CVE-2026-5787 and CVE-2026-5788) were disclosed in Ivanti EPMM versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1. CVE-2026-5787 allows attackers to impersonate Sentry hosts and obtain…

  2 articles · Updated May 8, 2026
• Critical Vulnerabilities in Spring Boot's SSL Configuration for Elasticsearch and RabbitMQ

  Two critical vulnerabilities have been identified in Spring Boot's auto-configuration for Elasticsearch and RabbitMQ. CVE-2026-40970 affects Elasticsearch, while CVE-2026-40971 impacts RabbitMQ. Both vulnerabilities…

  2 articles · Updated April 27, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1053 articles · Updated February 9, 2026
• Multiple Vulnerabilities in Palo Alto Networks GlobalProtect App Exposed

  Palo Alto Networks disclosed two critical vulnerabilities in their GlobalProtect app. CVE-2026-0251, published on 2026-05-13, allows local privilege escalation on Windows, macOS, and Linux, enabling non-administrative…

  2 articles · Updated May 14, 2026
• Multiple Fedora Docker Vulnerabilities Addressed in Recent Updates

  Fedora has released updates for docker-buildx and docker-buildkit to address CVE-2026-39984, which involves improper certificate validation. The vulnerabilities affect multiple Fedora versions, including 42, 43, and 44,…

  6 articles · Updated May 23, 2026
• Pip Vulnerabilities Lead to Regression and Potential Attacks

  On May 29, 2026, Ubuntu announced a regression in pip due to patches for CVE-2025-66471, which were initially intended to fix vulnerabilities in pip on Ubuntu 22.04 LTS, 24.04 LTS, and 26.04 LTS. The regression caused…

  5 articles · Updated May 29, 2026

Recent Intelligence Reports

• Check Point patches critical VPN flaw exploited in zero-day attacks | brief — Scworld · June 8, 2026
• Ransomware crims got a month-long head start on Check Point VPN 0 — Theregister · June 8, 2026
• Check Point links VPN zero — Bleepingcomputer · June 8, 2026
• CC-4792 — Digital.Nhs.Uk · June 8, 2026
• USN-8344-1: pip vulnerabilities — Ubuntu · May 28, 2026
• Fedora 42 docker-buildx Critical Improper Certificate Valid 2026 — Linuxsecurity · May 23, 2026
• Fedora 43 docker-buildkit Moderate CVE-2026 — Linuxsecurity · May 23, 2026
• Fedora 43 docker-buildx Important Improper Certificate Valid CVE-2026 — Linuxsecurity · May 23, 2026

Related Entities