{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/openssl--1.1.1zk/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-107496"},{"id":"CVE-2026-88822"},{"id":"CVE-2026-88823"},{"id":"CVE-2026-95691"},{"id":"CVE-2026-95692"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenSSL (\u003c 1.0.2zt)","OpenSSL (\u003c 1.1.1zk)","OpenSSL (\u003c 3.0.24)","OpenSSL (\u003c 3.5.10)","OpenSSL (\u003c 4.0.4)","OpenSSL (\u003c 4.1.1)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","openssl","cryptography"],"_cs_type":"advisory","_cs_vendors":["OpenSSL"],"content_html":"\u003cp\u003eThe OpenSSL Project has released a security advisory addressing multiple vulnerabilities affecting the 1.0.2, 1.1.1, 3.0, 3.5, 4.0, and 4.1 release branches. These vulnerabilities may lead to remote denial-of-service, exposure of sensitive data, or bypass of security policies. Organizations should refer to the official OpenSSL security advisory for specific technical details and patch availability.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may allow attackers to disrupt service availability (DoS), gain unauthorized access to sensitive information, or circumvent established security controls.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all applications and services utilizing the OpenSSL library across the infrastructure.\u003c/li\u003e\n\u003cli\u003ePatch all instances of OpenSSL to the identified secure versions or later: 1.0.2zt, 1.1.1zk, 3.0.24, 3.5.10, 4.0.4, or 4.1.1.\u003c/li\u003e\n\u003cli\u003ePrioritize patching of internet-facing services or those handling sensitive user authentication and data.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T16:33:30Z","date_published":"2026-11-10T16:33:30Z","id":"https://feed.craftedsignal.io/briefs/2026-11-openssl-vulnerabilities/","summary":"Multiple vulnerabilities discovered in OpenSSL across multiple release branches allow for remote denial-of-service, data confidentiality breaches, and security policy bypasses.","title":"OpenSSL: Multiple vulnerabilities (CVE-2026-107496, CVE-2026-88822, CVE-2026-88823, CVE-2026-95691, CVE-2026-95692)","url":"https://feed.craftedsignal.io/briefs/2026-11-openssl-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenSSL (\u003c 1.1.1zk)","version":"https://jsonfeed.org/version/1.1"}