https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T10:25:32.212702+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40944 CVE-2026-40944 — Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles 2026-10-10T10:25:32.227419+00:00

Affected: oxia-db oxia

Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool() function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates (e.g., intermediate + root CA), only the first certificate is loaded. This silently breaks certificate chain validation for mTLS. This vulnerability is fixed in 0.16.2.