CWE-599
14 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 14
- Last 12 months
- 3
- Critical
- 1
- Known exploited
- 0
Critical 1High 8Medium 5Low 0Not scored 0
CVEs per yearBy the year they were published
- 20211
- 20221
- 20231
- 20244
- 20255
- 20262
Newest CVEs
- CVE-2026-62657
Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
NETGEAR · MR70
Medium4.9 - CVE-2026-25060
OpenList Insecure TLS Default Configuration
OpenListTeam · OpenList
High8.1 - CVE-2025-63432
Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is Missing SSL Certificate Validation. The application fails to properly validate the TLS…
Product not named
Medium4.6 - CVE-2025-56232
GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle…
Product not named
Medium6.8 - CVE-2025-56230
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
Product not named
High7.5 - CVE-2025-12553
Server Certificate Verification Disabled
Azure Access Technology · BLU-IC2
Critical10.0 - CVE-2025-56146
Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity.
Product not named
Medium5.3 - CVE-2024-41265
A TLS certificate verification issue discovered in cortex v0.42.1 allows attackers to obtain sensitive information via the makeOperatorRequest function.
Product not named
High7.5 - CVE-2024-41253
goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component.
Product not named
High7.1 - CVE-2024-40464
An issue in beego v.2.2.0 and before allows a remote attacker to escalate privileges via the sendMail function located in beego/core/logs/smtp.go file
Product not named
High8.8