PT-2026-109442

🗓️ 27 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 3 Views

Use-after-free in OpenSSL TLS and SSL protocols allows remote unauthorized access to info.

Reporter	Title	Published	Views	Family All 441
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management on Hybrid Cloud is affected by multiple security vulnerabilities.	26 Oct 202616:06	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Oct 202609:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	17 Sep 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2026-45447	15 Aug 202617:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL	14 Jul 202622:25	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2026-45447	24 Sep 202602:28	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL	22 Jul 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for August 2026	23 Sep 202614:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in xorg-x11-server, mod_http2, httpd, openssl, openssl-fips-provider, glibc, libxml2, kernel, sssd, krb5, expat, rsyslog, apr-util libraries affect Power HMC.	21 Oct 202613:02	–	ibm

Source	Link
github	www.github.com/openssl/openssl/commit/18de9aba8294b5fb0915866cf3a1bb45f9599b8d
github	www.github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e
github	www.github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c
deb	www.deb.freexian.com/extended-lts/tracker/CVE-2026-45447
github	www.github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54
access	www.access.redhat.com/security/cve/CVE-2026-45447
github	www.github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-45447
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-45447
github	www.github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c

27 Apr 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 29

CVSS 3.18.8

EPSS0.04002

SSVC

OpenSSL TLS SSL use-after-free remote unauthorized access