CWE-599: Missing Validation of OpenSSL Certificate
The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.
5 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-12553 — Server Certificate Verification Disabled
- CVE-2026-25060 — OpenList Insecure TLS Default Configuration
- CVE-2026-62657 — Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
Recently published
- CVE-2026-62657 — Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
- CVE-2026-25060 — OpenList Insecure TLS Default Configuration
- CVE-2025-12553 — Server Certificate Verification Disabled