CVE-2026-22250

Summary

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, the SSL verification would be skipped for some crafted URLs. This vulnerability is fixed in 1.17.0.

Affected Software

Weaknesses

• CWE-295: CWE-295: Improper Certificate Validation

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/WeblateOrg/wlc/security/advisories/GHSA-2mmv-7rrp-g8xh
• https://github.com/WeblateOrg/wlc/pull/1097
• https://github.com/WeblateOrg/wlc/commit/a513864ec4daad00146e6d6e039559726e256fa3

• ←Previous
• Next→