Fedora 44 : openssl (2026-51251b4657)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-51251b4657 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-45221

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

EUVD-2026-69428

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

CVE-2026-45221 Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

CVE-2026-45221 Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

CVE-2026-45221

Konga before 2.1.0 is vulnerable to local privilege escalation via a hardcoded OpenSSL filesystem path that does not exist in default installations. On Windows , the missing directory sits in a location writable by any authenticated local user, allowing an attacker to create it and plant maliciou...

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

CLSA-2026-1788271978 openssl: Fix of 2 CVEs

CVE-2026-54874: fix excessive memory use when buffering DTLS records for a future epoch by copying only the record's own bytes instead of the whole read buffer, and lowering the unprocessed-records queue limit to 16 - CVE-2026-63072: fix 8-byte out-of-bounds heap write in CMS key unwrapping by...

CLSA-2026-1788271692 openssl: Fix of 2 CVEs

CVE-2026-54874: fix excessive memory use when buffering DTLS records for a future epoch by copying only the record's own bytes instead of the whole read buffer, and lowering the unprocessed-records queue limit to 16 - CVE-2026-63072: fix 8-byte out-of-bounds heap write in CMS key unwrapping by...

CLSA-2026-1788265101 openssl: Fix of CVE-2026-54874

CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification...

CLSA-2026-1788264910 Fix CVE(s): CVE-2026-54874, CVE-2026-63072

SECURITY UPDATE: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch ssl/record/reclayerd1.c - debian/patches/CVE-2026-54874.patch: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch ssl/record/reclayerd1.c -...

CLSA-2026-1788264701 openssl: Fix of 2 CVEs

CVE-2026-54874: fix excessive memory use when buffering DTLS records for a future epoch by copying only the record's own bytes instead of the whole read buffer, and lowering the unprocessed-records queue limit to 16 - CVE-2026-63072: fix 8-byte out-of-bounds heap write in CMS key unwrapping by...

CLSA-2026-1788264233 openssl: Fix of CVE-2026-54874

CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification...

openSUSE 16 Security Update : go1.26-openssl (openSUSE-SU-2026:21705-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21705-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...

MiracleLinux 9 : php-8.0.30-8.el9_8 (AXSA:2026-1720:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1720:03 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash...

PT-2026-84403

Name of the Vulnerable Software and Affected Versions Konga versions prior to 2.1.0 Description A privilege escalation issue allows low-privileged local attackers to execute arbitrary code. This is achieved by placing attacker-controlled OpenSSL configuration or library files in a hardcoded...

CVE-2026-45221: Uncontrolled Search Path Element

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing...

Improper Input Validation

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...