Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
view advisory published 2026-07-07
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-31985US | — | — | ||
When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided… | ||||
02
remediations (2)
- MitigationRemote Collector
Manually edit the "n2os.conf.user" file in the Remote Collector and remove the "!" prefix from the upstream Guardian or CMC endpoint entry to enable TLS certificate verification.
- FixedRemote Collector
Upgrade Remote Collector to v26.2.0 or later.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan