Threats tagged 'ghsa-r2h8-f93q-7r66'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.6	CVE-2026-129117C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows High7.62026-11-13GCVE DatabaseCVE-2026-129117 C-Kermit versions from 8.0.200 up to but not including 11.1.515 contain a vulnerability in certificate validation. The function ssl_reply() fails to call ssl_check_server_name(), allowing attackers to impersonate Telnet servers. This flaw enables machine-in-the-middle attackers to refuse START-TLS, offer Telnet AUTHENTICATION SSL, and present any trusted CA certificate to capture user credentials and session data. Report on CVE-2026-129117 Vulnerability CWE-297 #ghsa-r2h8-f93q-7r66	GCVE Database	2026-11-13

Page 1 of 1