VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: OpenSSL× typ: zranitelnost× v celém archivu zrušit filtry

8 karet z 8 položek CZ · EN/orig

· zachyceno

ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-63073.

EPSS 0.01 CVSS 6.5 CVE-2026-63073 OpenSSL US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

· zachyceno

SPOJENO PŘES CVE ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of OpenSSL. An attacker must first obtain the ability to modify CMS AuthEnvelopedData messages in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.1. The following CVEs are assigned: CVE-2026-34182.

EPSS 0.01 CVSS 3.1 CVE-2026-34182 OpenSSL US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability · Microsoft Security · CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages

SPOJENO PŘES CVE Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE

[FSA-202602] Festo AX OS versions 25.0.1.46 and 25.9.2.4, which are based on PLCnext by Phoenix Contact, used by the Festo product CEPE are affected by multiple OpenSSL vulnerabilities. The vulnerabilities are identified as CVE-2025-15467 and CVE-2025-69419. Attacks may be possible when maliciously crafted firmware, key files, PKCS#12 files, CMS/PKCS#7 content, or digitally signed objects are uploaded and processed by the affected system. In the device context, exploitation typically requires a…

EPSS 0.75 CVE-2025-15467 CVE-2025-69419 Festo Phoenix Contact OpenSSL výroba a průmysl DE

tg: zranitelnost tp: průmyslové systémy

· CERT@VDE · Multiple OpenSSL vulnerabilities affect Festo AX OS in CEPE

OpenSSL security advisory (AV26-980)

Serial number: AV26-980 Date: October 1, 2026 As of September 29, 2026, OpenSSL is affected by vulnerabilities in the following product: OpenSSL Prior to 1.0.2zs Prior to 1.1.1zj Prior to 3.0.23 Prior to 3.4.8 Prior to 3.5.9 Prior to 3.6.5 Prior to 4.0.3 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Vulnerabilities | OpenSSL Library

OpenSSL CA

tg: zranitelnost

· Cyber Centre Kanada · OpenSSL security advisory (AV26-980)

Risolte vulnerabilità in OpenSSL

Rilasciati aggiornamenti di sicurezza che sanano 14 vulnerabilità, di cui 4 con gravità "alta", in OpenSSL, software open source per la gestione delle comunicazioni crittografiche. Tali vulnerabilità, qualora sfruttata, potrebbero consentire ad un utente malintenzionato di compromettere la disponibilità del servizio o di accedere ad informazioni sensibili sui sistemi interessati.

EPSS 0.01 CVE-2026-72897 CVE-2026-84782 CVE-2026-84783 CVE-2026-84784 OpenSSL IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in OpenSSL

· zachyceno

Multiples vulnérabilités dans OpenSSL (30 septembre 2026)

De multiples vulnérabilités ont été découvertes dans OpenSSL. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

EPSS 0.01 CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84783 CVE-2026-84784 OpenSSL FR

tg: zranitelnost tp: DDoS

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans OpenSSL (30 septembre 2026)

· zachyceno

SPOJENO PŘES CVE K000162604: NGINX ngx_http_v3_module vulnerability CVE-2026-90439

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.5, CVEs: CVE-2026-90439, Summary: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with OpenSSL versions 3.5.0 and earlier under certain configurations, a limited heap buffer overflow could happen while processing a Transport Layer Security (TLS) handshake. This can happen in a non-deterministic manner that is beyond the attacker's control. This…

EPSS 0.00 CVSS 6.5 CVE-2026-90439 NGINX OpenSSL F5 FI FR

tg: zranitelnost

· zachyceno · NCSC-FI · K000162604: NGINX ngx_http_v3_module vulnerability CVE-2026-90439 · zachyceno · CERT-FR – avis · Vulnérabilité dans F5 NGINX (16 septembre 2026)