Lucene search
+L

CVE-2026-28390

🗓️ 07 Apr 2026 22:00:54Reported by opensslType 
cve
 cve
🔗 web.nvd.nist.gov👁 532 Views

NULL dereference in CMS KeyTransportRecipientInfo processing causes DoS on untrusted EnvelopedData.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.
29 Jul 202608:53
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerable Version of Software in Use
6 Jul 202622:29
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues
24 Aug 202622:36
–ibm
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
14 Sep 202620:04
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL
1 Jul 202622:00
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
2 Jul 202610:48
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Security Vulnerabilities have been found in IBM Sovereign Core
30 Oct 202613:51
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.
29 Oct 202610:08
–ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM i is Affected By NULL Pointer Dereference, Use Afer Free, and Out-of-Bounds Write Vulnerabilities in OpenSSL [CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-28387, CVE-2026-31789]
8 Jun 202620:07
–ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL
23 Jun 202603:15
–ibm
Rows per page
NVD
Vulners
Vulnrichment
Node
OR
opensslopensslRange1.0.2–1.0.2zp
opensslopensslRange1.1.1–1.1.1zg
opensslopensslRange3.0.0–3.0.20
opensslopensslRange3.3.0–3.3.7
opensslopensslRange3.4.0–3.4.5
opensslopensslRange3.5.0–3.5.6
opensslopensslRange3.6.0–3.6.2
[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "3.6.2",
        "status": "affected",
        "version": "3.6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.5.6",
        "status": "affected",
        "version": "3.5.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.4.5",
        "status": "affected",
        "version": "3.4.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.3.7",
        "status": "affected",
        "version": "3.3.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.0.20",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "1.1.1zg",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.0.2zp",
        "status": "affected",
        "version": "1.0.2",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Jul 2026 23:10Current
7High risk
Vulners AI Score7
CVSS 3.17.5
EPSS0.00805
SSVC
532