CWE-295 证书验证不恰当 类弱点 822 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-295 属于证书验证不当漏洞，指软件未正确验证数字证书的有效性或完整性。攻击者常利用此缺陷实施中间人攻击，通过伪造证书拦截并篡改通信数据，窃取敏感信息或注入恶意代码。开发者应确保严格校验证书链、域名匹配及有效期，禁用弱算法，并启用证书固定机制，以保障传输层安全，防止身份冒充和数据泄露。
if ((cert = SSL_get_peer_certificate(ssl)) && host) foo=SSL_get_verify_result(ssl); if ((X509_V_OK==foo) || X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN==foo)) // certificate looks good, host can be trustedcert = SSL_get_peer_certificate(ssl); if (cert && (SSL_get_verify_result(ssl)==X509_V_OK)) { // do secret things }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-87571 | Google Chrome 加密问题漏洞 — Chrome | - | - | 2026-09-09 |
| CVE-2026-87551 | Google Chrome 加密问题漏洞 — Chrome | - | - | 2026-09-09 |
| CVE-2026-87608 | Google Chrome 加密问题漏洞 — Chrome | - | - | 2026-09-09 |
| CVE-2026-84197 | Eclipse Ditto 加密问题漏洞 — Eclipse Ditto | 9.2 | Critical | 2026-09-08 |
| CVE-2026-78234 | Red Hat Hawtio Operator 加密问题漏洞 — Red Hat build of Apache Camel - HawtIO 4 | 9.9 | Critical | 2026-09-08 |
| CVE-2026-79639 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 7.6 | High | 2026-09-07 |
| CVE-2026-80125 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.9 | Medium | 2026-09-07 |
| CVE-2026-79975 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.5 | Medium | 2026-09-07 |
| CVE-2026-79642 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.6 | Medium | 2026-09-07 |
| CVE-2026-79691 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 7.3 | High | 2026-09-07 |
| CVE-2026-79644 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 7.4 | High | 2026-09-07 |
| CVE-2026-79734 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 5.9 | Medium | 2026-09-07 |
| CVE-2026-80164 | Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application | 7.4 | High | 2026-09-07 |
| CVE-2026-20500 | MediaTek Chipset 加密问题漏洞 — MediaTek chipset | - | - | 2026-09-07 |
| CVE-2026-82208 | curl 加密问题漏洞 — curl | - | - | 2026-09-06 |
| CVE-2026-80230 | curl 加密问题漏洞 — curl | - | - | 2026-09-06 |
| CVE-2026-86185 | Bilibili Desktop 加密问题漏洞 — Bilibili Desktop | 8.0 | High | 2026-09-05 |
| CVE-2026-84961 | undici 加密问题漏洞 — undici | 7.4 | High | 2026-09-04 |
| CVE-2026-15937 | Checkmk 加密问题漏洞 — Checkmk | 5.3 | Medium | 2026-09-04 |
| CVE-2026-85525 | Snowflake Connector for Python 加密问题漏洞 — Snowflake Connector for Python | 7.4 | High | 2026-09-04 |
| CVE-2026-9036 | IBM Netezza Software 加密问题漏洞 — Netezza Software | 5.9 | Medium | 2026-09-03 |
| CVE-2026-84736 | Eclipse aeriOS Federator 加密问题漏洞 — Eclipse aeriOS | 8.3 | High | 2026-09-03 |
| CVE-2026-85221 | MISP 加密问题漏洞 — misp | 7.6 | High | 2026-09-03 |
| CVE-2026-82180 | Eclipse Arrowhead 授权问题漏洞 — Eclipse Arrowhead | 9.5 | Critical | 2026-09-03 |
| CVE-2026-82955 | Eclipse aeriOS 加密问题漏洞 — Eclipse aeriOS | 9.0 | Critical | 2026-09-02 |
| CVE-2026-82662 | Nodemailer 加密问题漏洞 — nodemailer | 6.5 | Medium | 2026-08-31 |
| CVE-2026-41012 | Cloud Foundry BOSH Director vCenter CPI 加密问题漏洞 — bosh-vsphere-cpi-release | 7.7 | High | 2026-08-29 |
| CVE-2025-64649 | IBM concert 加密问题漏洞 — Concert | 5.9 | Medium | 2026-08-28 |
| CVE-2025-36290 | IBM integrated analytics system 加密问题漏洞 — Integrated Analytics System | 5.9 | Medium | 2026-08-28 |
| CVE-2026-81518 | MongoDB BI Connector 加密问题漏洞 — BI Connector | 7.5 | High | 2026-08-28 |
CWE-295（证书验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 822 条 CVE 漏洞。