CVE Intelligence

Aria2 Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Aria2 Project products: 1 record(s), with severity, exploitation and fixes.

Aria2 1Aria2c 1

Exploited only (KEV) →

CVE-2026-8367 Medium · 5.3 CWE-295 May 13, 2026
aria2c Improper Certificate Validation
aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.