SEC.co
Emergency

By weakness (CWE)

CWE-671: related vulnerabilities

CVEs classified under CWE-671. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-31985HIGH 8.1

    A configuration flaw in the Remote Collector setup tool (n2os-tui) causes it to disable TLS certificate verification when connecting to upstream Guardian or CMC systems, with no way to re-enable it. This leaves the connection vulnerable to man-in-the-middle (MITM) attacks where an attacker on the network path could intercept, eavesdrop on, or manipulate the entire data stream between systems.