openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

🗓️ 21 Jul 2026 14:13:13Reported by RedHatType

redhat🔗 access.redhat.com👁 2 Views

RA-level trust-anchor substitution in OpenSSL CMP rootCaKeyUpdate enables root CA control.

Reporter	Title	Published	Views	Family All 153
IBM Security Bulletins	Security Bulletin:Vulnerability in OpenSSL affects IBM Netezza Appliance	12 Aug 202609:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	17 Sep 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	8 Jul 202606:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	26 Jun 202621:27	–	ibm
FreeBSD	OpenSSL -- Multiple vulnerabilities	9 Jun 202600:00	–	freebsd
FreeBSD	FreeBSD -- Multiple vulnerabilities in OpenSSL	9 Jun 202600:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1853)	22 Jun 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : openssl (ALSA-2026:25237)	11 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6335 : libcrypto3-udeb - security update	10 Jun 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Hardened Images	any	aarch64	chunkah	0.6.0-3.hum1	chunkah-0.6.0-3.hum1.aarch64.rpm
Red Hat Hardened Images	any	x86_64	chunkah	0.6.0-3.hum1	chunkah-0.6.0-3.hum1.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-42769
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42769
cve	www.cve.org/CVERecord

24 Sep 2026 18:13Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00239

SSVC

OpenSSL CMP trust-anchor substitution rootCaKeyUpdate privilege escalation unix