目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CWE-295 证书验证不恰当 类漏洞列表 550

CWE-295 证书验证不恰当 类弱点 550 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-295 属于证书验证不当漏洞，指软件未正确验证数字证书的有效性或完整性。攻击者常利用此缺陷实施中间人攻击，通过伪造证书拦截并篡改通信数据，窃取敏感信息或注入恶意代码。开发者应确保严格校验证书链、域名匹配及有效期，禁用弱算法，并启用证书固定机制，以保障传输层安全，防止身份冒充和数据泄露。

MITRE CWE 官方描述
CWE：CWE-295 证书验证不当 英文：产品未对证书进行验证，或验证不正确。
常见影响 (1)
Integrity, AuthenticationBypass Protection Mechanism, Gain Privileges or Assume Identity
When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting s…
缓解措施 (2)
Architecture and Design, ImplementationCertificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
ImplementationIf certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
代码示例 (2)
This code checks the certificate of a connected peer.
if ((cert = SSL_get_peer_certificate(ssl)) && host) foo=SSL_get_verify_result(ssl); if ((X509_V_OK==foo) || X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN==foo)) // certificate looks good, host can be trusted
Bad · C
The following OpenSSL code obtains a certificate and verifies it.
cert = SSL_get_peer_certificate(ssl); if (cert && (SSL_get_verify_result(ssl)==X509_V_OK)) { // do secret things }
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2026-48021 epa4all 远程代码执行漏洞 — epa4all 9.1 Critical2026-07-24
CVE-2026-54342 epa4all CXF传输客户端TLS证书验证被禁用 — epa4all 8.1 High2026-07-24
CVE-2026-56820 Netty 加密问题漏洞 — netty 7.4 High2026-07-21
CVE-2026-56624 Apache MINA SSHD 加密问题漏洞 — Apache MINA SSHD 7.3 High2026-07-20
CVE-2026-46428 lettre 加密问题漏洞 — lettre--2026-07-20
CVE-2026-13410 GARU Dancer::Plugin::Auth::Google 加密问题漏洞 — Dancer::Plugin::Auth::Google--2026-07-17
CVE-2026-50302 Microsoft Windows Cryptographic Services 加密问题漏洞 — Windows 10 Version 21H2 4.2 Medium2026-07-14
CVE-2026-47632 Microsoft Azure Monitor Agent Metrics Extension 加密问题漏洞 — Azure Monitor Agent Metrics Extension 8.8 High2026-07-14
CVE-2026-55001 Microsoft Windows Active Directory 加密问题漏洞 — Windows 10 Version 1607 7.8 High2026-07-14
CVE-2026-59836 Fortinet FortiClientEMS 加密问题漏洞 — FortiClientEMS 6.7 High2026-07-14
CVE-2026-15683 LOREX 2K Indoor Wi-Fi Security Camera 加密问题漏洞 — 2K Indoor Wi-Fi Security Camera--2026-07-13
CVE-2026-22093 EVbee Service 加密问题漏洞 — EVbee Service--2026-07-13
CVE-2026-54919 yhirose cpp-httplib 加密问题漏洞 — cpp-httplib 7.4 High2026-07-10
CVE-2026-0277 Palo Alto Networks Prisma Access Agent 加密问题漏洞 — Prisma Access Agent--2026-07-09
CVE-2026-59818 etcd-io etcd 加密问题漏洞 — etcd 6.5 Medium2026-07-08
CVE-2026-55436 Coder 加密问题漏洞 — coder 7.4 High2026-07-08
CVE-2026-6900 B&R Industrial Automation APROL 加密问题漏洞 — APROL 7.4 High2026-07-06
CVE-2026-8480 Stormshield Network Security 加密问题漏洞 — Stormshield Network Security 4.3 Medium2026-07-01
CVE-2026-12374 Cato Networks SDP Client 加密问题漏洞 — SDP Client--2026-07-01
CVE-2026-7532 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-10098 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-6450 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-6731 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-10592 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-11310 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-55960 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-55964 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-11999 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-6091 wolfSSL 加密问题漏洞 — wolfSSL--2026-06-25
CVE-2026-46734 Dell Display and Peripheral Manager 加密问题漏洞 — Display and Peripheral Manager 7.3 High2026-06-25

CWE-295（证书验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 550 条 CVE 漏洞。