CWE-296: CWE-296

Total CVEs

Critical

High

9.0

Avg CVSS

Yearly Trend

2025

2021

Top Affected Vendors

1 Icinga 1

2 Gallagher 1

All CWE-296 CVEs (3)

CVE-2025-48057

9.8

A certificate validation vulnerability in Icinga 2 allows attackers to obtain valid certificates by tricking the system into treating malicious certif...

May 27, 2025

CVE-2021-23155

9.0

This vulnerability allows attackers to perform man-in-the-middle attacks against Gallagher Command Centre Mobile Client for Android by exploiting impr...

Nov 18, 2021

CVE-2025-1146

8.1

A TLS certificate validation logic error in CrowdStrike Falcon Linux-based sensors could allow man-in-the-middle attacks. Attackers controlling networ...

Feb 12, 2025

About CWE-296 (CWE-296)

Our database tracks 3 CVEs classified as CWE-296, with 2 rated critical and 1 rated high severity. The average CVSS score for CWE-296 vulnerabilities is 9.0.

External reference: View CWE-296 on MITRE CWE →

Monitor CWE-296 Vulnerabilities

Get alerted when new CWE-296 CVEs affect your infrastructure.

Start Monitoring Free