Lucene search
+L

CVE-2026-54875 Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V

🗓️ 29 Sep 2026 15:32:17Reported by opensslType 
cvelist
 cvelist
🔗 www.cve.org👁 49 Views

Non-constant-time SM2 scalar multiplication in OpenSSL on ARM64 and RISC-V leaks secrets.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
freebsd
FreeBSD
OpenSSL -- Multiple vulnerabilities
29 Sep 202600:00
–freebsd
alpinelinux
AlpineLinux
CVE-2026-54875
29 Sep 202615:32
–alpinelinux
cbl_mariner
CBLMariner
CVE-2026-54875 affecting package openssl for versions less than 3.3.7-7
12 Oct 202615:25
–cbl_mariner
circl
Circl
CVE-2026-54875
30 Sep 202612:50
–circl
cve
CVE
CVE-2026-54875
29 Sep 202615:32
–cve
debian
Debian
[SECURITY] [DSA 6531-1] openssl security update
30 Sep 202606:09
–debian
debiancve
Debian CVE
CVE-2026-54875
29 Sep 202615:32
–debiancve
nessus
Tenable Nessus
Debian dsa-6531 : libcrypto3-udeb - security update
30 Sep 202600:00
–nessus
nessus
Tenable Nessus
FreeBSD : OpenSSL -- Multiple vulnerabilities (0d183075-bcb5-11f1-b09d-8447094a420f)
1 Oct 202600:00
–nessus
nessus
Tenable Nessus
OpenSSL 3.4.0 < 3.4.8 Multiple Vulnerabilities
30 Sep 202600:00
–nessus
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "product": "OpenSSL",
    "vendor": "OpenSSL",
    "versions": [
      {
        "lessThan": "4.0.3",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.6.5",
        "status": "affected",
        "version": "3.6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.5.9",
        "status": "affected",
        "version": "3.5.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.4.8",
        "status": "affected",
        "version": "3.4.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Sep 2026 15:32Current
CVSS 3.13.7
EPSS0.00294
SSVC
49