CVE-2026-6412

0th percentile — higher than 0% of all known CVEs

The vulnerability concerns issues with certificate policy and RFC 8446 compliance, involving the continued acceptance of SHA-1 and MD5 algorithms in certificate processing.

The risk involves the potential exploitation of weak hash functions (SHA-1, MD5) to forge certificates, which could lead to man-in-the-middle attacks or impersonation of trusted entities.

It is recommended to disable acceptance of certificates using SHA-1 and MD5, and update the software to a version compliant with RFC 8446, which mandates the use of stronger cryptographic algorithms.