https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T14:43:39.036265+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109399 fkie_cve-2026-109399 2026-10-14T14:43:39.065307+00:00

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can embed that intermediate in the signature to install malicious updates.

 https://db.gcve.eu/vuln/ghsa-xf8v-f779-856c GHSA-xf8v-f779-856c 2026-10-14T14:43:39.065410+00:00

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can embed that intermediate in the signature to install malicious updates.