Skip to main content

OpenSSL EUVDEUVD-2026-35478

| CVE-2026-34182 CRITICAL
Improper Validation of Integrity Check Value (CWE-354)
2026-06-09 GHSA-f9v2-4w9p-2cwc
OpenSSL Information Disclosure
Critical
Disputed · 9.1 Vendor
Share

Severity by source

Sources disagree (Medium–Critical)
Vendor (CNA) PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
vuln.today AI
8.2 HIGH

Forgery acceptance is fundamentally an integrity failure (I:H) reachable remotely without auth (AV:N/AC:L/PR:N/UI:N); confidentiality impact is secondary and application-dependent (C:L), diverging from the vendor's C:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
SUSE
5.9 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Red Hat
7.4 MEDIUM
qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

4
Source Code Evidence Fetched
Jul 23, 2026 - 17:11 vuln.today
Analysis Generated
Jul 23, 2026 - 17:11 vuln.today
CVE Published
Jun 09, 2026 - 11:43 github-releases
CRITICAL 9.1
CVE Published
Jun 09, 2026 - 11:43 nvd
UNKNOWN (no severity yet)

Description PRE-NVD

Disclosed via GitHub release of openssl/openssl. NVD scoring and full description are pending.

AnalysisAI

Cryptographic message forgery in OpenSSL (branches 3.0.x, 3.4.x, 3.5.x, 3.6.x, and 4.0.0) allows an attacker to craft CMS AuthEnvelopedData messages that pass authentication and are accepted as genuine, defeating the integrity guarantee of CMS authenticated encryption. Any application relying on OpenSSL's CMS layer to reject tampered or forged authenticated-envelope messages can be tricked into processing attacker-controlled content as trusted. There is no public exploit identified at time of analysis, EPSS is 0.00%, and CISA SSVC lists exploitation status as none, but the flaw is network-reachable with no privileges required.

Technical ContextAI

The vulnerability lies in OpenSSL's Cryptographic Message Syntax (CMS, RFC 5652) implementation, specifically the processing of the AuthEnvelopedData content type. AuthEnvelopedData provides authenticated encryption (AEAD) so that a recipient can both decrypt content and verify it was not tampered with, using an authentication tag (e.g. AES-GCM). The root cause maps to CWE-354 (Improper Validation of Integrity Check Value): OpenSSL failed to properly validate the integrity/authentication check during AuthEnvelopedData processing, so forged or altered messages are accepted rather than rejected. The affected component is the OpenSSL library (cpe:2.3:a:openssl:openssl), which underpins TLS, S/MIME, and CMS operations across a vast range of software; the vendor tags this as Information Disclosure, though the core defect is an authentication/forgery bypass in the AEAD verification path.

RemediationAI

Upgrade OpenSSL to a fixed release for your branch: 3.0.21, 3.4.6, 3.5.7, 3.6.3, or 4.0.1 (Vendor-released patch: OpenSSL 4.0.1 and the corresponding backport releases), per the OpenSSL advisory at https://openssl-library.org/news/secadv/20260609.txt and the release notes at https://github.com/openssl/openssl/releases/tag/openssl-4.0.1; the fix is delivered across commits 03c1f4d4, 439ed7d2, 7947e6a8, 9fd97f8c, and d2ca86bc. On managed distributions, apply the vendor package update (for Ubuntu, USN-8414-2). Because the flaw is in the shared library, rebuild or restart all services that link OpenSSL after patching so they load the corrected code. If immediate patching is not possible, the specific compensating control is to avoid relying on OpenSSL CMS AuthEnvelopedData verification for trust decisions - disable or gate any workflow that processes untrusted CMS AuthEnvelopedData messages, and add an independent signature/authentication layer around such messages; the trade-off is that these controls require application-level changes and may break interoperability with peers that legitimately send AuthEnvelopedData.

More in OpenSSL

View all
CVE-2014-0160 HIGH POC
7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
CVE-2014-0195 MEDIUM POC
6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0
CVE-2014-0224 HIGH POC
7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
CVE-2016-0800 MEDIUM POC
5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se
CVE-2015-0204 MEDIUM POC
4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2014-3566 LOW POC
3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
CVE-2016-2107 MEDIUM POC
5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM POC
6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH
7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig
CVE-2014-3470 MEDIUM
4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before
CVE-2017-3730 HIGH POC
7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

CVE-2016-8610 HIGH
7.5 Nov 13

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

Same weakness CWE-354 – Improper Validation of Integrity Check Value

View all
CVE-2023-48795 MEDIUM POC
5.9
CVE-2024-3596 CRITICAL
9.0
CVE-2023-33668 CRITICAL POC
9.8
CVE-2026-50021 HIGH POC
8.1
CVE-2022-36174 HIGH POC
8.1
CVE-2019-13496 HIGH POC
8.1
CVE-2024-51141 HIGH POC
7.8
CVE-2023-38802 HIGH POC
7.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2023-4966 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.189 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.170 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.185 Container suse/sl-micro/6.0/toolbox:13.2-9.122 Affected
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.155 Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.121 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.141 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.135 Affected
Container suse/sl-micro/6.1/base-os-container:2.2.1-5.141 Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Affected
SUSE Liberty Linux 10 Fixed

Share

EUVD-2026-35478 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy