目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-295 证书验证不恰当 类漏洞列表 822

CWE-295 证书验证不恰当 类弱点 822 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-295 属于证书验证不当漏洞，指软件未正确验证数字证书的有效性或完整性。攻击者常利用此缺陷实施中间人攻击，通过伪造证书拦截并篡改通信数据，窃取敏感信息或注入恶意代码。开发者应确保严格校验证书链、域名匹配及有效期，禁用弱算法，并启用证书固定机制，以保障传输层安全，防止身份冒充和数据泄露。

MITRE CWE 官方描述
CWE：CWE-295 证书验证不当 英文：产品未对证书进行验证，或验证不正确。
常见影响 (1)
Integrity, Authentication Bypass Protection Mechanism, Gain Privileges or Assume Identity
When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting s…
缓解措施 (2)
Architecture and Design, Implementation Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Implementation If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
代码示例 (2)
This code checks the certificate of a connected peer.
if ((cert = SSL_get_peer_certificate(ssl)) && host) foo=SSL_get_verify_result(ssl); if ((X509_V_OK==foo) || X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN==foo)) // certificate looks good, host can be trusted
Bad · C
The following OpenSSL code obtains a certificate and verifies it.
cert = SSL_get_peer_certificate(ssl); if (cert && (SSL_get_verify_result(ssl)==X509_V_OK)) { // do secret things }
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-118682 ClashMi 1.0.32.1801 禁用 TLS 验证致 MITM 漏洞 — clashmi 7.5 High 2026-10-28
CVE-2026-87880 Acronis Cyber Protect 17 缺失 SSL 验证致信息泄露 — Acronis Cyber Protect 17 - - 2026-10-28
CVE-2026-108326 Tanium Stream Client 证书验证漏洞 — Endpoint Configuration Toolset Solution 6.5 Medium 2026-10-27
CVE-2026-115216 Eclipse ioFog Operator 传输凭据时禁用 TLS 证书验证漏洞 — Eclipse ioFog 9.1 Critical 2026-10-27
CVE-2026-41022 Eaton easySoft TLS 证书验证缺失致中间人攻击 — easySoft 5.9 Medium 2026-10-27
CVE-2026-111459 Moxa Remote Connect Suite 未认证配置漏洞 — Moxa Remote Connect Suite (MRC Client) 7.6 High 2026-10-27
CVE-2025-13833 ForeScout SecureConnector 不安全TLS验证导致远程代码执行漏洞 — SecureConnector 7.7 High 2026-10-26
CVE-2026-115930 MongoDB Shell 证书信任漏洞 — mongosh 6.8 Medium 2026-10-26
CVE-2026-115693 Hackney 证书固定绕过漏洞 — hackney 9.1 Critical 2026-10-26
CVE-2026-115996 宇树 Go2 chat_go 证书验证绕过漏洞 — Unitree Go2 3.7 Low 2026-10-24
CVE-2026-115929 MongoDB Compass 中间 CA 证书信任漏洞 — Compass 6.8 Medium 2026-10-24
CVE-2026-106072 Node.js 22/24/26 TLS 主机验证绕过漏洞 — node - - 2026-10-23
CVE-2026-106069 Node.js 22/24/26 TLS 主机验证漏洞 — node - - 2026-10-23
CVE-2026-105483 Node.js 24.x/26.x TLS 主机验证绕过漏洞 — node - - 2026-10-23
CVE-2026-107685 WebSocket 会话未验证 TLS 证书致凭据泄露漏洞 — req_llm 9.1 Critical 2026-10-23
CVE-2026-114611 OCO-Server MDM 身份泄露与设备劫持漏洞 — OCO-Server 9.1 Critical 2026-10-22
CVE-2026-106017 OpenVPN 3 Core 3.4-3.11.7 证书验证绕过漏洞 — OpenVPN 3 Core Library 6.3 Medium 2026-10-22
CVE-2026-114220 NewType NT OneAPP 证书验证不当漏洞 — NT OneAPP 9.1 Critical 2026-10-22
CVE-2026-114642 Traefik 2.11.58/3.7.14 前 TLS 配置绕过漏洞 — traefik 8.7 High 2026-10-22
CVE-2026-87944 SAML SSO 服务提供者严重证书验证漏洞 — SAML SSO - Service Provider - - 2026-10-22
CVE-2026-96375 Cloud 远程代码执行漏洞 SA-CONTRIB-2026-176 — Cloud - - 2026-10-22
CVE-2026-114406 Ca-certificates 中间证书不信任漏洞 — Red Hat Enterprise Linux 10 6.8 Medium 2026-10-21
CVE-2026-111815 Apache Traffic Server TLS 会话恢复绕过 SNI 验证漏洞 — Apache Traffic Server 10.0 Critical 2026-10-21
CVE-2026-111814 Apache Traffic Server mTLS 身份混淆漏洞 — Apache Traffic Server 10.0 Critical 2026-10-21
CVE-2026-114047 FreeRDP 2.0.0 至 3.32.0 代理 TLS 证书验证漏洞 — FreeRDP 6.8 Medium 2026-10-21
CVE-2026-113812 Perl Mozilla::CA 20261020 证书链被污染漏洞 - - 2026-10-20
CVE-2026-113119 Chrome 156.0.8078.47 前 Network Use-after-free 漏洞 — Chrome - - 2026-10-20
CVE-2026-1501 IBM Concert 软件证书验证不当漏洞 — Concert 3.7 Low 2026-10-19
CVE-2026-112106 TikTok-Video-Downloader-PHP TLS 证书验证漏洞 — TikTok-Video-Downloader-PHP 3.7 Low 2026-10-19
CVE-2026-85247 Apache Camel 证书验证绕过漏洞 — Apache Camel 5.9 Medium 2026-10-19

CWE-295（证书验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 822 条 CVE 漏洞。