EUVD-2026-35487
GHSA-3cxm-476w-ghm2
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Primary rating from Vendor (CNA) · only source for this CVE.
CVSS VectorVendor
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Lifecycle Timeline
5Description PRE-NVD
AnalysisAI
FFC-DH peer validation in OpenSSL incorrectly accepts an attacker-supplied q (subgroup order) parameter instead of using the locally trusted value, undermining the cryptographic integrity of Diffie-Hellman key exchange. Affected branches span OpenSSL 3.0.x, 3.4.x, 3.5.x, 3.6.x, and 4.0.0, with patched releases issued across all five branches on 2026-06-09. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target to be running an affected OpenSSL version (4.0.0, or 3.0.x/3.4.x/3.5.x/3.6.x below their respective patch thresholds) and to be performing FFC-DH key exchange on a code path that invokes OpenSSL's DH peer parameter validation. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 3.7 (Low) with vector AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N accurately characterizes the constrained real-world risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An adversary performing an active man-in-the-middle attack on a TLS session negotiating a DHE cipher suite intercepts the ServerKeyExchange or equivalent FFC-DH parameter message and substitutes a crafted `q` value of their choosing. Because the target OpenSSL peer uses the attacker-supplied `q` instead of the trusted group order during validation, subgroup membership checks are defeated, potentially allowing the attacker to influence key material derivation and extract limited session information. … |
| Remediation | Upgrade to the patched release corresponding to the installed OpenSSL branch: 4.0.1, 3.6.3, 3.5.7, 3.4.6, or 3.0.21, as detailed in the vendor advisory at https://openssl-library.org/news/secadv/20260609.txt. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More from same product – last 7 days
Cryptographic primality validation in Deno's Node.js compatibility layer (versions <= 2.8.0) silently skips Miller-Rabin
mTLS bypass in Traefik 3.7.0-3.7.1 lets unauthenticated remote clients reach backends protected by wildcard-router TLSOp
Authentication bypass in Traefik v3.6.17, v3.7.0, and v3.7.1 allows unauthenticated remote attackers to bypass router-sp
Share
External POC / Exploit Code
Leaving vuln.today