CVE-2026-106036
2026-10-29
16h17 +00:00
16h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An attacker can provide an arbitrary SSL/TLS certificate and cause the application to download an update file from their server.
This issue was fixed in version 2.0 build 708.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Certificate Validation The product does not validate, or incorrectly validates, a certificate. |
