CVE Catalog
CVE-2026-50208
CriticalCVSS 9.4Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES encryption keys, a Man-in-the-Middle attacker can decrypt network traffic.
Risk Assessment
An attacker can intercept and decrypt all network traffic, leading to data confidentiality breaches and potential theft of sensitive information.
Recommendation
Remove or replace TrustAllCerts routines with proper certificate validation. Use strong encryption algorithms (e.g., AES) and avoid hard-coded keys.
Original NVD description (English source)
High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.