ROOT-OS-DEBIAN-12-CVE-2026-14456 CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-54874 CVE-2026-54874 in openssl - Patched by Root

Root has patched CVE-2026-54874 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63072 CVE-2026-63072 in openssl - Patched by Root

Root has patched CVE-2026-63072 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root

Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...

Exploit for CVE-2026-105221

abraxaslabs.tech · github.com/abraxas ·&...

PT-2026-106751

Name of the Vulnerable Software and Affected Versions MsQuic versions prior to 2.4.20 MsQuic versions prior to 2.5.11 MsQuic versions prior to 2.6.1 Description MsQuic clients using the OpenSSL or QuicTLS TLS backends fail to properly verify that a server certificate matches the intended target...

CVE-2026-105794: Improper Certificate Validation

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : EDK II vulnerabilities (USN-8865-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8865-1 advisory. It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker cou...

ALSA-2026:76918 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 For...

spookyssl-pcaps

PCAP SpookySSL e Copertura di Rete PCAP o non è successo A seguito della vulnerabilità recentemente divulgata in OpenSSL v3.0 fino alla v3.0.6 CVE-2022-3602, abbiamo esaminato come appare un tentativo di sfruttamento 'sulla rete'. Questo repository contiene PCAP di vari scenari di sfruttamento,...

Astra Linux – Vulnerability in Bouncycastle

Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

[SECURITY] Fedora 45 Update: openssl-4.0.3-1.fc45

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

The vulnerability of the buffers CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update in the OpenSSL library for the Rust programming language allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the buffers in CipherCtxRef::cipherupdate, CipherCtxRef::cipherupdatevec, and symm::Crypter::update functions in the OpenSSL library for the Rust programming language is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker t...

Fedora 45 : openssl (2026-06c29a2cb4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-06c29a2cb4 advisory. Rebase to OpenSSL 4.0.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

[SECURITY] Fedora 44 Update: openssl-3.5.9-1.fc44

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Fedora 44 : openssl (2026-12f3f3d569)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-12f3f3d569 advisory. Rebase to OpenSSL 3.5.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...