CWE-298

8 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 2High 1Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-86231
mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
mwiede · jsch
Medium6.3
CVE-2024-1248
Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation
WSO2 · WSO2 API Manager
Medium4.8
CVE-2025-67109
Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with…
Product not named
Critical10.0
CVE-2025-67108
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
Product not named
Critical10.0
CVE-2025-61736
iSTAR- Improper Validation of Certificate Expiration
Johnson Controls · iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE
High7.1
CVE-2025-59036
Infrahub allows authentication with deleted and expired API tokens
opsmill · infrahub
Medium5.5
CVE-2025-4384
Certificate validity not properly verified
arcinfo · PcVue
Medium6.0
CVE-2023-42446
Pow Mnesia cache doesn't invalidate all expired keys on startup
pow-auth · pow
Medium6.5