Threats tagged 'ghsa-c5j4-p43c-gh65'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-106036Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS Medium6.92026-10-29GCVE DatabaseCVE-2026-106036 Szafir versions prior to 2.0 build 708 accept any client or server certificate without validating the certificate or hostname. This allows HTTPS connections without authenticating the remote server, enabling an attacker to present arbitrary SSL/TLS certificates and potentially cause the application to download malicious update files from their server. The vulnerability is fixed in version 2.0 build 708. Report on CVE-2026-106036 Vulnerability CWE-295 #ghsa-c5j4-p43c-gh65	GCVE Database	2026-10-29

Page 1 of 1