Improper Validation of Integrity Check Value

🗓️ 09 Jun 2026 18:33:08Reported by Snyk Security DatabaseType

OpenSSL PBMAC1 PBKDF2 HMAC validation flaw allows forging PKCS Twelve with one-byte key in 1 of 256 attempts.

Reporter	Title	Published	Views	Family All 85
FreeBSD	OpenSSL -- Multiple vulnerabilities	9 Jun 202600:00	–	freebsd
FreeBSD	FreeBSD -- Multiple vulnerabilities in OpenSSL	9 Jun 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Due to the use of OpenSSL, IBM EntireX is vulnerable to multiple vulnerabilities	6 Jul 202615:29	–	ibm
Tenable Nessus	Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1853)	22 Jun 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : openssl (ALSA-2026:25237)	11 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6335 : libcrypto3-udeb - security update	10 Jun 202600:00	–	nessus
Tenable Nessus	Fedora 44 : openssl (2026-228373a496)	12 Jun 202600:00	–	nessus
Tenable Nessus	FreeBSD : OpenSSL -- Multiple vulnerabilities (259b562f-64ab-11f1-8607-8447094a420f)	11 Jun 202600:00	–	nessus
Tenable Nessus	FreeBSD : FreeBSD -- Multiple vulnerabilities in OpenSSL (a57fe2c1-6476-11f1-958d-bc241121aa0a)	11 Jun 202600:00	–	nessus
Tenable Nessus	OpenSSL 3.4.0 < 3.4.6 Multiple Vulnerabilities	9 Jun 202600:00	–	nessus

Vulners

Node

openssl opensslRange3.4.0–3.4.6

openssl opensslRange3.5.0–3.5.7

openssl opensslRange3.6.0–3.6.3

Source	Link
security	www.security.snyk.io/vuln/SNYK-CONAN-OPENSSL-17277226
cwe	www.cwe.mitre.org/data/definitions/CWE-354.html

27 Jun 2026 11:03Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.3 - 7.4

CVSS 46

EPSS0.00196

SSVC