VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
CERT/CC says TLS libraries inconsistently enforce Name Constraints, with three assigned CVEs already fixed.
64
- Mentions · 7d0
- Mentions · 30d3
- All mentions10
- First seenSep 9, 2026
- Last mentioned16d ago
Timeline
10 articles · newest firstClaude Helps Secure Open Source as Anthropic Offers Free Vulnerability Scanning
Anthropic launched free OSS Scanner, using Claude to find and report open-source vulnerabilities to maintainers.
73
OpenSSL security advisory (AV26-980)
Canadian Cyber Centre advisory AV26-980 lists multiple vulnerable OpenSSL branches and urges administrators to apply updates promptly.
15
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
OpenSSL patches high-severity DTLS flaw CVE-2026-84782 (CVSS 8.2) that can leak unencrypted heap memory or crash DTLS connections.
55
High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL
OpenSSL and wolfSSL patched roughly 25 vulnerabilities, including an 8.2-rated DTLS heap data leak and certificate authentication bypasses affecting Nginx and HAProxy builds.
55
OpenSSL High-Severity Flaw Lets Attackers Leak Heap Memory in Plaintext
OpenSSL patched high-severity CVE-2026-84782, a DTLS out-of-bounds read that can leak heap memory or crash services.
72
USN-8847-2: OpenSSL vulnerabilities
Ubuntu USN-8847-2 backports OpenSSL fixes for a CRL denial-of-service bug and a timing side-channel to ESM 14.04-20.04 LTS.
15
OpenSSL Security Advisory [29th September 2026]
OpenSSL rates DTLS handshake retransmission bug CVE-2026-84782 high severity.
72
New OpenSSL Releases
OpenSSL plans security-fix releases, including 4.0.3 and 3.6.5, for 29 September 2026.
66
OpenSSL’s new alpha build speeds up post-quantum crypto
OpenSSL 4.1.0 alpha1 adds DTLS 1.3 support and speeds up ML-DSA and ML-KEM post-quantum operations across several architectures.
40
Related CVEs
by mentions- OpenSSL DTLS retransmission out-of-bounds read leaks heap or crashes
- Use-After-Free Race in OpenSSL 4.0 Certificate Cache Allows Remote DoS
- Forged CA clones bypass wolfSSL peer authentication
- Authentication bypass in wolfSSL RPK TLS clients
- Certificate forgery via OCSP multi-stapling in wolfSSL
- CVE-2026-3547<1%7.5Out-of-bounds read in ALPN parsing due to incomplete validation
- CVE-2026-3833<1%7.4gnutls: This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
- Unauthenticated DTLS 1.2 Association Teardown in OpenSSL via Malformed AEAD Record
- OpenSSL memory-growth DoS via crafted CRL distribution points
- CVE-2026-34073<1%1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Appears with
- OpenSSLvendor · 5
- OpenSSLproduct · 4
- wolfSSLorganization · 3
- Ubuntuorganization · 2
- LibreSSLproduct · 1
- AWSorganization · 1
- Secorizonorganization · 1
- Claudeai model · 1
- pycaorganization · 1
- Go crypto/x509product · 1
- OpenSSL 4.1.0product · 1
- OSS Scannerproduct · 1
- CERT/CCorganization · 1
- Appleorganization · 1
- GnuTLSproduct · 1
- LibreSSLorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.