What is the CVSS score of EUVD-2026-35489?

EUVD-2026-35489 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of OpenSSL are affected by EUVD-2026-35489?

OpenSSL vulnerability CVE-2026-45445 undermines encryption security across multiple versions, as the AES-OCB cipher ignores unique initialization vectors and defaults to predictable values,…. A patch is available.

How to fix or mitigate EUVD-2026-35489?

Within 24 hours: Identify all systems and applications using OpenSSL versions 3.0.x, 3.4.x, 3.5.x, 3.6.x, or 4.0.0. Within 7 days: Apply vendor patches-upgrade to OpenSSL 3.0.21, 3.4.6, 3.5.7, 3.6.3, or 4.0.1 depending on deployed branch. Within 30 days: Complete security validation of AES-OCB implementations, review security logs for suspicious decryption attempts during the vulnerability window, and obtain attestation from vendors on patch deployment status.

OpenSSL EUVD-2026-35489

| CVE-2026-45445 HIGH

Missing Cryptographic Step (CWE-325)

2026-06-09

GHSA-v446-xwfm-x7mr

OpenSSL Information Disclosure

7.5

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SUSE

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Red Hat

9.1 MEDIUM

qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Source Code Evidence Fetched

Jun 09, 2026 - 20:23 vuln.today

Analysis Generated

Jun 09, 2026 - 20:23 vuln.today

CVSS changed

Jun 09, 2026 - 20:22 NVD

7.5 (HIGH)

CVE Published

Jun 09, 2026 - 11:43 nvd

UNKNOWN (no severity yet)

CVE Published

Jun 09, 2026 - 11:43 nvd

HIGH 7.5

Description PRE-NVD

Disclosed via GitHub release of openssl/openssl. NVD scoring and full description are pending.

Articles & Coverage 1

News 7 New OpenSSL Vulnerabilities - 1 Critical, 6 High Severity Jun 10, 2026

AnalysisAI

Confidentiality break in OpenSSL's AES-OCB implementation stems from the EVP_Cipher() code path ignoring the caller-supplied initialization vector (IV), causing the cipher to operate with a fixed/default IV instead. Affected branches include 3.0.x prior to 3.0.21, 3.4.x prior to 3.4.6, 3.5.x prior to 3.5.7, 3.6.x prior to 3.6.3, and 4.0.0, fixed in OpenSSL 4.0.1 and corresponding maintenance releases. With no public exploit identified at time of analysis and no CISA KEV listing, the issue is rated High (CVSS 7.5) due to high confidentiality impact via network-reachable cryptographic operations.

Technical ContextAI

AES-OCB is an authenticated encryption with associated data (AEAD) mode whose security guarantees collapse if the IV (nonce) is reused across encryptions under the same key - nonce reuse in OCB allows recovery of plaintext XOR relationships and ultimately authentication-key compromise. The defect is classified as CWE-325 (Missing Cryptographic Step): the EVP_Cipher() dispatch path for the AES-OCB EVP provider failed to honor the IV passed by the application, effectively constantizing the nonce. Applications that correctly call EVP_CipherInit_ex() with a unique IV per message but then invoke EVP_Cipher() (the lower-level one-shot dispatch) on the AES-OCB context were silently encrypting with an unintended IV, voiding the mode's confidentiality guarantee. The fix is delivered alongside a broader OpenSSL 4.0.1 security release that bundles fourteen separate CVEs across CMS, PKCS#7, QUIC, and ASN.1 handling, per the upstream release notes and the openssl-library.org advisory dated 2026-06-09.

RemediationAI

Vendor-released patch: OpenSSL 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21 - upgrade to the appropriate fixed release per your maintained branch as documented at https://github.com/openssl/openssl/releases/tag/openssl-4.0.1 and https://openssl-library.org/news/secadv/20260609.txt, and consume the distribution update where applicable (e.g., Ubuntu USN-8414-1 at https://ubuntu.com/security/notices/USN-8414-1). Where immediate upgrade is infeasible, an application-level workaround is to avoid the AES-OCB cipher entirely (switch to AES-GCM or ChaCha20-Poly1305 via EVP_CipherInit_ex with EVP_aes_256_gcm() etc.), or refactor code paths that use EVP_Cipher() against an AES-OCB context to use EVP_EncryptUpdate/EVP_EncryptFinal_ex which were not affected; the trade-off is loss of OCB's performance profile and a code change in any application code paths that selected OCB deliberately. Rotate any long-lived symmetric keys that were used with the vulnerable EVP_Cipher() + OCB path, since prior ciphertexts may have leaked plaintext relationships.

More in OpenSSL

View all

CVE-2014-0160 HIGH Act Now POC

7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

CVE-2014-0195 MEDIUM This Month POC

6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0

CVE-2014-0224 HIGH Act Now POC

7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph

CVE-2016-0800 MEDIUM This Month POC

5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se

CVE-2015-0204 MEDIUM This Month POC

4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2014-3566 LOW Monitor POC

3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak

CVE-2016-2107 MEDIUM This Month POC

5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM This Month POC

6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH Act Now

7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig

CVE-2014-3470 MEDIUM This Month

4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before

CVE-2017-3730 HIGH Act Now POC

7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

CVE-2016-8610 HIGH Act Now

7.5 Nov 13

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

Same weakness CWE-325 – Missing Cryptographic Step

View all

CVE-2021-22946 HIGH POC

7.5

CVE-2026-22863 HIGH POC

7.5

CVE-2026-48480 MEDIUM POC

6.6

CVE-2023-28999 MEDIUM POC

6.4

CVE-2023-28998 MEDIUM POC

6.1

CVE-2026-17666 CRITICAL

9.1

CVE-2021-3680 MEDIUM POC

4.9

CVE-2026-4601 HIGH

8.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2023-4966 HIGH POC

7.5

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Module for Basesystem 15 SP7	Affected
SUSE Linux Enterprise Server 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7	Affected
SUSE Linux Enterprise High Performance Computing 15 SP7	Affected

EUVD-2026-35489 vulnerability details – vuln.today

Back

OpenSSL EUVD-2026-35489

Severity by source

CVSS VectorVendor

Lifecycle Timeline

Description PRE-NVD

Articles & Coverage 1

AnalysisAI

Technical ContextAI

RemediationAI

More in OpenSSL

Same weakness CWE-325 – Missing Cryptographic Step

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code