Client-Certificate — PoC Archivehttps://poc.intelseclab.com/tags/client-certificate/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Apache mod_ssl TLS 1.3 Session Resumption Client Certificate Bypass (CVE-2025-23048)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-23048-apache-tls13-session-resumption-client-cert-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-23048-apache-tls13-session-resumption-client-cert-bypass/Critical severity (CVSS 9.1) — web · CVE-2025-23048. Status: PoC. Affects: Apache HTTP Server (mod_ssl). Tags: apache, mod_ssl, httpd, tls1.3, session-resumption, client-certificate, authentication-bypass, cwe-295, openssl.webCriticalapachemod_sslhttpdtls1.3session-resumptionclient-certificateauthentication-bypasscwe-295openssllibcurl mTLS Connection Reuse Authentication Bypass (CVE-2026-8932)https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Low severity — network · CVE-2026-8932. Status: PoC. Affects: libcurl (embedded library; standalone curl CLI unaffected). Tags: authentication-bypass, mTLS, TLS, libcurl, connection-reuse, client-certificate, C, Low.networkLowauthentication-bypassmTLSTLSlibcurlconnection-reuseclient-certificateCLow