CVE Intelligence

Aria2 Project Aria2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Aria2 Project Aria2: 1 record(s), with affected versions and fixes.
cpe:2.3:a:aria2_project:aria2

CVE-2026-8367 Medium · 5.3 CWE-295 May 13, 2026
aria2c Improper Certificate Validation
aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.