CVE record · 1 source
CVE-2026-66392
Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the…
- Vendor
- Apple, GitHub
- Product
- ios, github
- Exposure class
- Mobile OS
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the…
Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or IP address. A network attacker who can redirect or…