CVE-2026-50208CWE-330

Permissive TrustAllCerts TLS Verification

Critical · published June 4, 2026

CVSS v4.0
9.2
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

High-risk TrustAllCerts routines disable standard TLS certificate validation. Combined with hard-coded DES symmetric encryption keys, a Man-in-the-Middle (MITM) actor could decrypt network traffic.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-330 · Use of Insufficiently Random Values
Published
2026-06-04T07:09Z
EPSS history
Timeline
  • 04 JUN 07:09Z
    Permissive TrustAllCerts TLS Verification
    cvelistv5