CVE Vulnerabilities

CVE-2026-22250

Improper Certificate Validation

Published: Jan 12, 2026 | Modified: Jan 27, 2026
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

wlc is a Weblate command-line client using Weblates REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

NameVendorStart VersionEnd Version
WlcWeblate*1.17.0 (excluding)
WlcUbuntudevel*
WlcUbuntuesm-apps/bionic*
WlcUbuntuesm-apps/focal*
WlcUbuntuesm-apps/jammy*
WlcUbuntuesm-apps/noble*
WlcUbuntujammy*
WlcUbuntunoble*
WlcUbuntuplucky*
WlcUbuntuquesting*
WlcUbuntuupstream*

Potential Mitigations

References