https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:22:48.713232+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-41256 CVE-2025-41256 — Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint 2026-10-09T02:22:48.729102+00:00

Affected: iterate GmbH Cyberduck, iterate GmbH Mountain Duck

Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak.

This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5.