https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:25:39.482096+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245819 EUVD-2026-245819 2026-10-05T16:25:39.484958+00:00 EUVD-2026-245819 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41256 fkie_cve-2025-41256 2026-10-05T16:25:39.484993+00:00

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak.

This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5.

 https://cve.radiocsirt.org/vuln/ghsa-qq37-7frg-jxx4 GHSA-qq37-7frg-jxx4 2026-10-05T16:25:39.485028+00:00

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak.

This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5.