CVE-2026-4434CWE-295

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS…

High · published March 20, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

Improper certificate validation in the PAM propagation WinRM connections

allows a network attacker to perform a man-in-the-middle attack via

disabled TLS certificate verification.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2026-03-20T12:52Z
EPSS history
Timeline
  • 20 MAR 12:52Z
    Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS…
    cvelistv5