CVE-2026-105031

CVE-2026-105031 · Published 29/10/2026 · updated 29/10/2026

In breve

CVE-2026-105031 è una vulnerabilità non ancora valutata.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.13%, superiore al 2.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs() APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates. This can be worked around by setting the SSL_CERT_FILE environment variable for the application to /dev/null. This issue does not affect the Win32 SChannel TLS implementation. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free