What is the CVSS score of EUVD-2026-35475?

EUVD-2026-35475 has a contested CVSS base score of 7.5 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of OpenSSL are affected by EUVD-2026-35475?

A denial-of-service vulnerability in OpenSSL's CMS password-based decryption allows remote attackers to crash applications processing attacker-supplied encrypted messages, affecting service…. A patch is available.

How to fix or mitigate EUVD-2026-35475?

24 hours: Identify systems running affected OpenSSL versions (1.0.2, 1.1.1, 3.0, 3.4, 3.5, 3.6, 4.0.0) and applications handling CMS-encrypted data. 7 days: Test OpenSSL 4.0.1 and other patched versions per vendor advisory in non-production; prioritize systems processing CMS messages. 30 days: Complete deployment of patched OpenSSL versions across all affected systems and validate application functionality.

OpenSSL EUVD-2026-35475

| CVE-2026-9076 HIGH

Out-of-bounds Read (CWE-125)

2026-06-09

GHSA-q98x-73c3-57gj

OpenSSL Information Disclosure Buffer Overflow

High

Disputed · 7.5 Vendor

Severity by source

Sources disagree (Low–High)

Vendor (CNA) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SUSE

3.7 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Red Hat

5.9 LOW

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Jun 09, 2026 - 20:24 vuln.today

Analysis Generated

Jun 09, 2026 - 20:24 vuln.today

CVSS changed

Jun 09, 2026 - 20:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 11:43 nvd

UNKNOWN (no severity yet)

CVE Published

Jun 09, 2026 - 11:43 nvd

HIGH 7.5

Description PRE-NVD

Disclosed via GitHub release of openssl/openssl. NVD scoring and full description are pending.

Articles & Coverage 1

News 7 New OpenSSL Vulnerabilities - 1 Critical, 6 High Severity Jun 10, 2026

AnalysisAI

Out-of-bounds read in OpenSSL's CMS password-based decryption code (CVE-2026-9076) allows remote attackers to cause denial of service against applications that decrypt attacker-supplied CMS messages. The flaw is fixed in OpenSSL 4.0.1 alongside a batch of other cryptographic vulnerabilities, with no public exploit identified at time of analysis and no CISA KEV listing. Multiple OpenSSL branches (1.0.2, 1.1.1, 3.0, 3.4, 3.5, 3.6, and 4.0.0) require updates per the upstream advisory.

Technical ContextAI

OpenSSL is the de facto cryptographic library used by web servers, mail servers, VPN endpoints, and countless TLS/PKI-dependent applications. The Cryptographic Message Syntax (CMS, RFC 5652) implementation in OpenSSL supports password-based decryption via PWRI (Password Recipient Info) structures inside EnvelopedData. CWE-125 (Out-of-bounds Read) here means that during PWRI processing, OpenSSL reads memory past the end of an allocated buffer - typically due to insufficient length validation of an ASN.1 field - which can leak adjacent heap contents or, more commonly, crash the process. The bundled advisory at openssl-library.org/news/secadv/20260609.txt confirms this is one of multiple CMS/ASN.1 parsing issues fixed in the same release, suggesting upstream is hardening CMS decoding broadly.

RemediationAI

Vendor-released patches are available: upgrade to OpenSSL 4.0.1, 3.6.3, 3.5.7, 3.4.6, 3.0.21, 1.1.1zh, or 1.0.2zq depending on the branch you run, per the OpenSSL advisory at https://openssl-library.org/news/secadv/20260609.txt and the release notes at https://github.com/openssl/openssl/releases/tag/openssl-4.0.1. Distribution users on Ubuntu should apply USN-8414-2 (https://ubuntu.com/security/notices/USN-8414-2); other distributions will likely follow. If immediate patching is not possible, the only meaningful compensating control is to stop accepting untrusted CMS EnvelopedData input - disable or front-end any service endpoint that calls CMS_decrypt() or PKCS7_decrypt() on attacker-influenced data, which will break legitimate password-based CMS workflows but eliminates the trigger path. Generic network filtering is not effective because the bug lives inside CMS parsing, not at a specific port.

More in OpenSSL

View all

CVE-2014-0160 HIGH Act Now POC

7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

CVE-2014-0195 MEDIUM This Month POC

6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0

CVE-2014-0224 HIGH Act Now POC

7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph

CVE-2016-0800 MEDIUM This Month POC

5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se

CVE-2015-0204 MEDIUM This Month POC

4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2014-3566 LOW Monitor POC

3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

CVE-2016-2107 MEDIUM This Month POC

5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM This Month POC

6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH Act Now

7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig

CVE-2014-3470 MEDIUM This Month

4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

CVE-2017-3730 HIGH Act Now POC

7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

CVE-2016-8610 HIGH Act Now

7.5 Nov 13

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

Same weakness CWE-125 – Out-of-bounds Read

View all

CVE-2014-0160 HIGH POC

7.5

CVE-2016-5198 HIGH POC

8.8

CVE-2025-5777 CRITICAL POC

9.3

CVE-2016-1646 HIGH POC

8.8

CVE-2017-5030 HIGH POC

8.8

CVE-2016-4523 HIGH

7.5

CVE-2024-48456 HIGH POC

7.5

CVE-2024-48457 HIGH POC

7.5

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2023-4966 HIGH POC

7.5

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	Affected
SUSE Linux Enterprise Micro 5.3	Affected

EUVD-2026-35475 vulnerability details – vuln.today

Back

OpenSSL EUVD-2026-35475

Severity by source

CVSS VectorVendor

Lifecycle Timeline

Description PRE-NVD

Articles & Coverage 1

AnalysisAI

Technical ContextAI

RemediationAI

More in OpenSSL

Same weakness CWE-125 – Out-of-bounds Read

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code