Approved changes feed: RSS · Atom

cpe:2.3:a:aria2_project:aria2c:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAria2 Project (bdcd17d3-3b73-5a59-a5a1-ef5f73e1f21d)
ProductAria2C (a498d7ee-2a75-5d8a-bd32-e757b377dbb2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8367 vulnerable 2026-06-08 08:08:58.312901 aria2c Improper Certificate Validation
MEDIUM (4.8)
aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
Published: 2026-05-13T14:55:09.815Z
Updated: 2026-05-13T18:35:03.804Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.