CVE-2025-7106312.01.2026, 16:16Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.EnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST8.2 HIGHADJACENT_NETWORKHIGHNONECVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:LmitreCNA8.2 HIGHADJACENT_NETWORKHIGHNONECVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:LCISA-ADPADP------Base ScoreCVSS 3.xEPSS ScorePercentile: UnknownDebian ReleasesDebian ProductCodenameerrandstrixieno-dsaforky46.2.10-1fixedsid46.2.10-1fixedCommon Weakness EnumerationCWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.Referenceshttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738https://github.com/mrvladus/Errands/commit/04e567b432083fc798ea2249363ea6c83ff01099https://github.com/mrvladus/Errands/compare/46.2.9...46.2.10https://github.com/mrvladus/Errands/issues/401https://github.com/mrvladus/Errands/releases/tag/46.2.10
