Iterate vulnerabilities
We track 2 vulnerabilities in Iterate products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2025.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Iterate vulnerabilities
- 7.4 High severity
Cyberduck: Use of Weak Hash
Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak. This issue affects Cyberduck: through 9.1.6; Mountain D
- 8.0 High severity
Cyberduck: Incorrect Privilege Assignment
Cyberduck and Mountain Duck improperly handle TLS certificate pinning for untrusted certificates (e.g., self-signed), unnecessarily installing it to the Windows Certificate Store of the current user without any restrictions. This issue affects Cyberduck throug