Home > Vulnerability Database > CVE-2025-71063

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2025-71063

Good to know:

Date: January 12, 2026

Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.

Severity Score

8.2

Related Resources (7)

Url: https://github.com/mrvladus/Errands/compare/46.2.9...46.2.10

Url: https://github.com/mrvladus/Errands/issues/401

Url: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123738

Url: https://github.com/mrvladus/Errands/commit/04e567b432083fc798ea2249363ea6c83ff01099

Url: https://github.com/mrvladus/Errands/releases/tag/46.2.10

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-71063

Url: https://www.mend.io/vulnerability-database/CVE-2025-71063

Severity Score

8.2

Weakness Type (CWE)

Improper Certificate Validation

CWE-295

Top Fix

Upgrade Version

Upgrade to version https://github.com/mrvladus/Errands.git - 46.2.10

CVSS v3.1

Base Score:	8.2
Attack Vector (AV):	ADJACENT_NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	CHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	LOW

Do you need more information?

Contact Us