CVE WATCH / VULNERABILITY DETAIL
CVE-2026-129117
MEDIUMCVSS 6.8NVD feed
Published 13 November 2026 · tracked since 14 November 2026
Description
C-Kermit 8.0.200 before 11.1.515 contains an improper certificate validation vulnerability that allows machine-in-the-middle attackers to impersonate Telnet servers because ssl_reply() never calls ssl_check_server_name(). Attackers can refuse START-TLS, offer Telnet AUTHENTICATION SSL, and present a
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110199 MEDIUM 4.8
- CVE-2026-128128 HIGH 7.5
- CVE-2026-127217 MEDIUM 6.4
- CVE-2026-127216 MEDIUM 6.5
- CVE-2026-68905 HIGH 8.2
- CVE-2026-128089 HIGH 7.5
- CVE-2026-127215 HIGH 8.1
- CVE-2026-127214 HIGH 8.5
- CVE-2026-128088 LOW 2.2
- CVE-2026-128087 LOW 3.7