CVE-2026-18717
ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker to impersonate the trusted peer, complete the TLS handshake, and read or modify protected communications.
- Published Aug 28, 2026
- CVSS 9.1 critical
- 0.2% chance of exploitation in the next 30 days (EPSS)