CVE-2025-12478

Non-Compliant TLS Configuration.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 .

Scoring

Severity

CRITICAL

CVSS base score

10

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS probability

0.23%

CWE

CWE-326

Published

2025-10-29

Last modified

2026-03-13

Affected products

• Azure Access Technology BLU-IC2
• Azure Access Technology BLU-IC4

Weakness type

• CWE-326

Related vulnerabilities

• CVE-2026-86670 — aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
• CVE-2023-54356 — Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
• CVE-2026-81718 — openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
• CVE-2026-79084 — Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to...
• CVE-2026-74889 — openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
• CVE-2026-65777 — Active Directory Security Feature Bypass Vulnerability
• CVE-2026-9201 — Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
• CVE-2026-59651 — BKS keystore accepts legacy version with 16-bit integrity MAC key

Markdown version · Browse all CVEs