critical9.0
CVE-2026-118697
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates
JetBrains · Toolbox App / JetBrains · IntelliJ IDEA
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
45 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
critical10.0
high8.2
CVE-2026-119559
OpenLiteSpeed through 1.9.4 mTLS Bypass via HTTP/3 SNI and Host Mismatch
litespeedtech · openlitespeed
high8.7
CVE-2026-92744
Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
Delinea · Privilege Manager
high7.4
CVE-2026-119190
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
digitalbazaar · forge
medium5.9
CVE-2026-119189
Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
digitalbazaar · forge
low3.7
CVE-2026-118780
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
digitalbazaar · forge
high8.3
CVE-2026-119118
Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags
unclecode · crawl4ai
medium6.9
unknown
CVE-2026-105031
Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.
Apache Software Foundation · Apache Qpid Proton C
high7.1
high7.6
CVE-2026-116641
The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs
MongoDB · Database Tools
high7.7
CVE-2026-118682
ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM
KaringX · clashmi
high7.5
CVE-2026-118040
Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
Progress Software · Telerik Document Processing Libraries
medium6.8
CVE-2026-87880
Sensitive information disclosure due to missing SSL certificate verification affecting one component.
Acronis · Acronis Cyber Protect 17
medium6.5
CVE-2026-108326
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
Tanium · Endpoint Configuration Toolset Solution / Tanium · cx-stream
critical9.1
CVE-2026-115216
Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
Eclipse Foundation · Eclipse ioFog
medium5.9
CVE-2026-41022
Eaton easySoft improperly validates TLS certificates presented by easyE4 devices.
Eaton · easySoft
high7.6
CVE-2026-111459
Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)
Moxa · Moxa Remote Connect Suite (MRC Client)
high7.7
CVE-2025-13833
Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution
Forescout Technologies · SecureConnector
high7.6
CVE-2026-115930
MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs
MongoDB, Inc. · mongosh
medium6.3
CVE-2026-115996
Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation
Unitree Robotics · Unitree Go2
critical9.1
medium6.8
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
Red Hat · Red Hat Enterprise Linux 10 / Red Hat · Red Hat Enterprise Linux 10.0 Extended Update Support
critical9.1
critical9.1
high7.4
high7.5
CVE-2026-108131
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Windows 10 Version 1607 / Microsoft · Windows 10 Version 1809
high7.4
CVE-2026-96222
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Microsoft · Microsoft .NET Framework 3.5 / Microsoft · Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
medium6.5
CVE-2026-70194
.NET Framework Security Feature Bypass Vulnerability
Microsoft · .NET 11.0 runtime / Microsoft · Microsoft Visual Studio 2022 version 17.14