CVE-2026-63073

The OpenSSL library's CMP protocol implementation contains a CWE-134 (Use of Externally-Controlled Format String) vulnerability in the ossl_cmp_msg_check_update() function. The software fails to properly sanitize a peer-supplied sender distinguished name before passing it as a format string to ER...

CVE-2026-63073: Use of Externally-Controlled Format String

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...