Missing Cryptographic Step

🗓️ 09 Jun 2026 18:33:03Reported by Snyk Security DatabaseType

Missing cryptographic step in AES-OCB causes nonce reuse and forgery via EVP_Cipher; upgrade OpenSSL to 3.1.0.

Reporter	Title	Published	Views	Family All 103
FreeBSD	OpenSSL -- Multiple vulnerabilities	9 Jun 202600:00	–	freebsd
FreeBSD	FreeBSD -- Multiple vulnerabilities in OpenSSL	9 Jun 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	1 Jul 202622:38	–	ibm
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1853)	22 Jun 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : openssl (ALSA-2026:25237)	11 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6335 : libcrypto3-udeb - security update	10 Jun 202600:00	–	nessus
Tenable Nessus	Fedora 44 : openssl (2026-228373a496)	12 Jun 202600:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Multiple vulnerabilities (259b562f-64ab-11f1-8607-8447094a420f)	11 Jun 202600:00	–	nessus
Tenable Nessus	FreeBSD : FreeBSD -- Multiple vulnerabilities in OpenSSL (a57fe2c1-6476-11f1-958d-bc241121aa0a)	11 Jun 202600:00	–	nessus

Vulners

Node

openssl opensslRange3.0.5–3.0.21

openssl opensslRange3.4.0–3.4.6

openssl opensslRange3.5.0–3.5.7

openssl opensslRange3.6.0–3.6.3

Source	Link
security	www.security.snyk.io/vuln/SNYK-CONAN-OPENSSL-17277138
cwe	www.cwe.mitre.org/data/definitions/CWE-325.html

16 Jun 2026 11:02Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5 - 9.1

CVSS 48.3

EPSS0.0032

SSVC