Adacore vulnerabilities
We track 4 vulnerabilities in Adacore products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2025.
Latest Adacore vulnerabilities
- 7.5 High severity
Ada Web Server: Uncontrolled Resource Consumption
Adacore Ada Web Server (AWS) before 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling of SSL handshakes during connection initialization. When a client initiates an HTTPS connection, the server performs the SSL handshake before
- 7.4 High severity
Ada Web Server: Improper Certificate Validation
When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-the-middle attack because of lack of verification of an HTTPS server's certificate (unless the using program specifies a TLS configuration).
- 7.5 High severity
ada_web_services: Use of Insufficiently Random Values
An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module.
- 7.4 High severity
ada_web_services: Improper Validation of Certificate with Host Mismatch
An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle a