Blog category: vulnerability-disclosure

• CVE-2026-120250: How Missing TLS Verification, Exposed OpenAlgo’s SMTP Credentials

  Here's how our pyspector-monitor pipeline found a disabled TLS certificate check in OpenAlgo's SMTP code, leading to MiTM attacks