目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1310 元

100%
请我们喝杯咖啡

CWE-295 证书验证不恰当 类漏洞列表 502

CWE-295 证书验证不恰当 类弱点 502 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-295 属于证书验证不当漏洞，指软件未正确验证数字证书的有效性或完整性。攻击者常利用此缺陷实施中间人攻击，通过伪造证书拦截并篡改通信数据，窃取敏感信息或注入恶意代码。开发者应确保严格校验证书链、域名匹配及有效期，禁用弱算法，并启用证书固定机制，以保障传输层安全，防止身份冒充和数据泄露。

MITRE CWE 官方描述
CWE：CWE-295 证书验证不当 英文：产品未对证书进行验证，或验证不正确。
常见影响 (1)
Integrity, AuthenticationBypass Protection Mechanism, Gain Privileges or Assume Identity
When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting s…
缓解措施 (2)
Architecture and Design, ImplementationCertificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
ImplementationIf certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
代码示例 (2)
This code checks the certificate of a connected peer.
if ((cert = SSL_get_peer_certificate(ssl)) && host) foo=SSL_get_verify_result(ssl); if ((X509_V_OK==foo) || X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN==foo)) // certificate looks good, host can be trusted
Bad · C
The following OpenSSL code obtains a certificate and verifies it.
cert = SSL_get_peer_certificate(ssl); if (cert && (SSL_get_verify_result(ssl)==X509_V_OK)) { // do secret things }
Bad · C
CVE ID标题CVSS风险等级Published
CVE-2026-34073 cryptography 信任管理问题漏洞 — cryptography 9.1AICriticalAI2026-03-31
CVE-2026-32794 Apache Airflow 信任管理问题漏洞 — Apache Airflow Provider for Databricks 7.4 -2026-03-30
CVE-2026-32884 Botan 信任管理问题漏洞 — botan 5.9 Medium2026-03-30
CVE-2019-25652 Ubiquiti UniFi Network Controller 信任管理问题漏洞 — UniFi Network Controller 7.5 High2026-03-27
CVE-2026-33896 Digital Bazaar Forge 信任管理问题漏洞 — forge 7.4 High2026-03-27
CVE-2025-15612 Wazuh 安全漏洞 — Wazuh Provisioning Scripts (Agent Build Environment) 4.8 Medium2026-03-27
CVE-2026-33542 Incus 信任管理问题漏洞 — incus 7.1 -2026-03-26
CVE-2026-33308 mod_gnutls 信任管理问题漏洞 — mod_gnutls 6.8 Medium2026-03-24
CVE-2026-4587 Hybridauth 信任管理问题漏洞 — HybridAuth 3.7 Low2026-03-23
CVE-2026-4434 Devolutions Server 安全漏洞 — Server 7.4 -2026-03-20
CVE-2026-4396 Devolutions Hub Reporting Service 安全漏洞 — Hub Reporting Service 7.4 -2026-03-18
CVE-2026-32293 GL-iNet Comet 安全漏洞 — Comet KVM 3.7 Low2026-03-17
CVE-2026-32627 cpp-httplib 信任管理问题漏洞 — cpp-httplib 8.7 High2026-03-13
CVE-2026-31798 JumpServer 信任管理问题漏洞 — jumpserver 5.0 Medium2026-03-13
CVE-2026-2368 Lenovo Filez 安全漏洞 — FileZ 7.1 High2026-03-11
CVE-2026-1068 Lenovo Filez 安全漏洞 — FileZ 5.3 Medium2026-03-11
CVE-2026-24508 Dell Alienware Command Center 信任管理问题漏洞 — Alienware Command Center (AWCC) 2.5 Low2026-03-11
CVE-2024-14024 QNAP Systems Video Station 安全漏洞 — Video Station 8.0AIHighAI2026-03-11
CVE-2026-27221 Adobe Acrobat Reader 信任管理问题漏洞 — Acrobat Reader 5.5 Medium2026-03-10
CVE-2025-68482 Fortinet FortiManager和Fortinet FortiAnalyzer 信任管理问题漏洞 — FortiAnalyzer 6.3 Medium2026-03-10
CVE-2026-3822 Taipower APP 信任管理问题漏洞 — Taipower APP 6.5 Medium2026-03-09
CVE-2026-30794 RustDesk 安全漏洞 — RustDesk Client 7.4 -2026-03-05
CVE-2025-40896 Nozomi Networks Arc 信任管理问题漏洞 — Arc 6.5 Medium2026-03-04
CVE-2026-2748 SEPPmail Secure Email Gateway 安全漏洞 — Secure Email Gateway 7.5AIHighAI2026-03-04
CVE-2026-3336 AWS libcrypto 安全漏洞 — AWS-LC 7.5 High2026-03-02
CVE-2025-67601 SUSE Rancher 信任管理问题漏洞 — rancher 8.3 High2026-02-25
CVE-2026-3100 ASUSTOR ADM 安全漏洞 — ADM 6.8 -2026-02-25
CVE-2025-67752 OpenEMR 信任管理问题漏洞 — openemr 8.1 High2026-02-25
CVE-2026-27133 Strimzi 安全漏洞 — strimzi-kafka-operator 5.9 Medium2026-02-20
CVE-2026-24122 cosign 信任管理问题漏洞 — cosign 3.7 Low2026-02-19

CWE-295（证书验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 502 条 CVE 漏洞。