https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:30:12.711682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-37823 cnvd-2017-37823 2026-10-17T23:30:12.772893+00:00 cnvd-2017-37823 https://cve.radiocsirt.org/vuln/euvd-2026-76737 EUVD-2026-76737 2026-10-17T23:30:12.772947+00:00 EUVD-2026-76737 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11501 fkie_cve-2017-11501 2026-10-17T23:30:12.772962+00:00

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.

 https://cve.radiocsirt.org/vuln/ghsa-9ggv-74q3-4mc4 GHSA-9ggv-74q3-4mc4 2026-10-17T23:30:12.772993+00:00

NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. The users.ldap NixOS module implements user authentication against LDAP servers via a PAM module. It was found that if TLS is enabled to connect to the LDAP server with users.ldap.useTLS, peer verification will be unconditionally disabled in /etc/ldap.conf.

 https://cve.radiocsirt.org/vuln/gsd-2017-11501 gsd-2017-11501 2026-10-17T23:30:12.773010+00:00 gsd-2017-11501