CWE-298 · Improper Validation of Certificate Expiration

8 CVEs classified under CWE-298 (Improper Validation of Certificate Expiration). Browse by severity and year.

Top CVEs for CWE-298
CVESeverityScorePublishedSummary
CVE-2025-67109Critical10.02025-12-23Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with Sys…
CVE-2025-67108Critical10.02025-12-23eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
CVE-2023-42446Medium6.52023-09-18Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store…
CVE-2025-59036Medium5.52025-09-09Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tok…
CVE-2024-1248Medium4.82026-07-04The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation w…
CVE-2026-86231Low3.72026-09-06A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.j…
CVE-2025-617362025-12-17Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
CVE-2025-43842025-05-06The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices…
All CVEs classified under CWE-298 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-86231Low3.72026-09-06A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.j…
CVE-2024-1248Medium4.82026-07-04The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation w…
CVE-2025-67109Critical10.02025-12-23Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with Sys…
CVE-2025-67108Critical10.02025-12-23eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
CVE-2025-617362025-12-17Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
CVE-2025-59036Medium5.52025-09-09Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tok…
CVE-2025-43842025-05-06The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices…
CVE-2023-42446Medium6.52023-09-18Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store…