deadtrickster vulnerabilities

Products

• ssl verify fun 1

Latest deadtrickster CVEs

Newest publication first

1. CVE-2026-117666 ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

   Published 2026-10-30

   Critical·CVSS 9.1 EPSS 0.19%

   Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to impersonate a TLS peer via a certificate that carries a partial-label wildcard. try_match_wildcard/4 in src/ssl_verify_hostname.erl anchors onl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.