CVE-2026-129482 | Square OkHttp up to 5.5.1 CertificatePinner Pin.matchesHostname certificate validation (EUVD-2026-126033)

November 15, 2026 Yanac

A vulnerability was found in Square OkHttp up to 5.5.1. It has been declared as problematic. Affected by this vulnerability is the function Pin.matchesHostname of the component CertificatePinner. Such manipulation leads to improper certificate validation.

This vulnerability is uniquely identified as CVE-2026-129482. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More