ROS-20260420-73-0018

🗓️ 20 Apr 2026 00:00:00Reported by RedosType

redos

redos🔗 redos.red-soft.ru👁 8 Views

OpenSSL CMS handler vulnerability enables remote code execution via out-of-bounds IV handling.

Reporter	Title	Published	Views	Family All 253
GithubExploit	Exploit for CVE-2025-15467	28 Jan 202612:44	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Openssl	7 Apr 202613:40	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Openssl	14 Mar 202614:16	–	githubexploit
GithubExploit	Exploit for CVE-2025-15467	30 Jan 202600:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM i is affected by multiple vulnerabilities in OpenSSL	17 Mar 202621:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	21 May 202615:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 May 202607:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Out-of-bounds Write due to OpenSSL (CVE-2025-15467)	29 Jun 202614:36	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	openssl3 openssl3-devel openssl3-libs	3.5.5	UNKNOWN

20 Apr 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.19.8

EPSS0.47621

SSVC

OpenSSL CMS remote code execution out of bounds initialization vector crafted packets