$_SecureScope악용 확인 · 악용 확률 · 한국어 권고
소개
CVE Ledger

CWE-297 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 17,280건이 중 악용 확인 1,734건분류: CWE-297
우선순위순최신 공개순CWE-787 276CWE-78 202CWE-416 189CWE-22 163CWE-502 120CWE-94 119CWE-20 96CWE-119 94CWE-306 81CWE-843 79

CWE-297 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

7.621CWE-297CVE-2026-19553ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLConte…0.4%높음7.69.229CWE-297CVE-2026-92943Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS…0.4%심각9.29.326CWE-295CVE-2026-63374AnyIO is a high level asynchronous concurrency and networking framework that works on top of either …0.3%심각9.37.525CWE-297CVE-2026-59969Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. Wh…0.3%높음7.57.428CWE-295CVE-2026-84975PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, …0.2%높음7.45.729CWE-297CVE-2026-91166Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.25.0 until 0.27.6, th…0.2%보통5.76.928CWE-295CVE-2026-85088Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. B…0.2%보통6.99.228CWE-295CVE-2026-84197In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascri…0.2%심각9.2

전체 목록

14건

CVE-2026-102669Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.0.2%보통6.9
CVE-2026-84393A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…0.2%높음8.1
CVE-2026-79636Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%높음7.0
CVE-2026-91769PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no …0.1%보통4.3
CVE-2026-9744IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificat…0.1%보통5.3
CVE-2026-79943Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통4.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.