NewsFortinet PSIRT
ZTNA Portal Improper Certificate Validation
More on Certificate
Other advisories
- Not ratedosv:GO-2026-6651Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in github.com/xtls/xray-core
- Not ratedosv:CVE-2026-112037diem-project diem Google Analytics Client gapi.class.php certificate validation
- Not ratedosv:CVE-2026-109553Gitea SSH certificate principal impersonation of other users
- Not ratedosv:CVE-2026-112006OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation
- Not ratedosv:CVE-2026-111044Disabled Sunshine clients can bypass revocation with a derived client certificate
- MediumCVE-2026-105818Vault PKI ACME Issues Certificate With Unvalidated SANs
- MediumCVE-2026-111458The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size …
- MediumCVE-2026-105236TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries
Other news entries
- Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day SwitchNewsSecurityWeek
- Google Domains Impacted by Recent ccTLD HijacksNewsSecurityWeek
- Microsoft: Outdated Windows devices will stop receiving security updatesNewsBleepingComputer
- Let's Encrypt cuts certificate lifetimes to 64 days starting February 2027NewsArs Technica — Security
- We are fighting phishing at the wrong layerNewsCSO Online
- Hackers hijack Google domains after breaching ccTLD registriesNewsBleepingComputer
- Attackers hijacked top-level domains, minted fake security certs for Google and other orgsNewsThe Register — Security
- Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google DomainsNewsThe Hacker News
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-174
ID