https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T13:18:32.838814+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109399 CVE-2026-109399 — SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 2026-10-14T13:18:32.840264+00:00

Affected: sbabic swupdate

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can embed that intermediate in the signature to install malicious updates.