CVE-2019-8351

9.1 criticalEPSS 1.3%

Critical (9.1) in heimdalsecurity thor. EPSS 1.3% chance of exploitation in the next 30 days.

Heimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate.

Severity

CVSS 3.0

9.1 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2019-03-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

heimdalsecurity:thor

References

https://support.heimdalsecurity.com/hc/en-us/articles/360001084158-Release-2-5-172-PROD-Update
https://support.heimdalsecurity.com/hc/en-us/articles/360001084158-Release-2-5-172-PROD-Update

Check your stack JSON