The vulnerability of PKCS#12 format file formats in the OpenSSL library allows a hacker to trigger a service failure or execute arbitrary code.

🗓️ 04 Feb 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

PKCS twelve format flaws in SSL library allow code execution or service disruption via pointer misuse.

Reporter	Title	Published	Views	Family All 161
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	21 May 202615:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 May 202607:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image	17 Aug 202619:50	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in OpenSSL affects IBM DevOps Code ClearCase	16 Sep 202606:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	3 Mar 202615:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in openssl affects IBM Netezza Appliance	12 May 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	11 May 202623:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	24 Mar 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.6.21 shipped with IBM Cloud Pak for Business Automation iFixes for April 2026	28 May 202621:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple CVEs (CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796)	2 Mar 202611:34	–	ibm

Vulners

Node

openssl opensslRange3.5–3.5.5

openssl opensslRange3.4–3.4.4

openssl opensslRange3.6.0–3.6.1

node.js node.jsMatch22.22.0

node.js node.jsMatch24.13.0

node.js node.jsMatch25.3.0

Source	Link
openssl-library	www.openssl-library.org/news/vulnerabilities/index.html
openssl-library	www.openssl-library.org/news/secadv/20260127.txt
github	www.github.com/metadust/CVE-2025-11187
redos	www.redos.red-soft.ru/search/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.2/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Sep 2026 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 25.7

CVSS 36.1

EPSS0.05139