CWE-296

CVEs per yearBy the year they were published

1. 20191
2. 20201
3. 20213
4. 20221
5. 20254
6. 20269

Newest CVEs

• CVE-2026-96770

  s2s-proxy accepts untrusted client certificates

  Temporal Technologies, Inc. · s2s-proxy

  Critical9.3
• CVE-2026-73542

  Multiple SEIKO EPSON printers and scanners contain revoked root certificates. A man-in-the-middle attack may allow an attacker to obtain communication data…

  SEIKO EPSON CORPORATION · Multiple SEIKO EPSON printers and scanners

  Medium6.3
• CVE-2026-24066

  Slate Digital Connect macOS XPC certificate validation privilege escalation

  Slate Digital LLC · Slate Digital Connect

  High8.4
• CVE-2026-42789

  Non-CA certificate accepted as intermediate issuer in public_key path validation

  Erlang · OTP

  High7.0
• CVE-2026-44852

  Authenticated Remote Code Execution via Arbitrary File Overwrite in the AOS-8 and AOS-10 Web-Based Management Interface

  Hewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating System (AOS)

  High7.2
• CVE-2025-10539

  Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App

  DeskTime · DeskTime Time Tracking App

  Medium4.8
• CVE-2026-33779

  Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

  Juniper Networks · Junos OS

  High8.3
• CVE-2026-27134

  Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication

  strimzi · strimzi-kafka-operator

  High8.1
• CVE-2026-27133

  Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters

  strimzi · strimzi-kafka-operator

  Medium5.9
• CVE-2025-48057

  Icinga 2 certificate renewal might incorrectly renew an invalid certificate

  Icinga · icinga2

  Critical9.3

Vendors it comes up for most

1. Gallagher2
2. strimzi2
3. Cisco1
4. CrowdStrike1
5. Dell1
6. DeskTime1
7. Erlang1
8. Hewlett Packard Enterprise (HPE)1
9. IBM1
10. Icinga1