Vulnerabilitymedium

OpenSSL 3.6.2 lands with eight CVE fixes

Help Net Securityby @helpnetsecurityApr 8, 2026 · 00:00 UTC (Apr 8, 2026)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-31790 CVE-2026-2673 CVE-2026-28386 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789

Tags: cve-2026-2673 cve-2026-28386 cve-2026-28387 cve-2026-28388 cve-2026-31790 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-2673	Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the…	6.5	<1%		Mar 13, 2026
CVE-2026-31789 +6 related CVEs CVE-2026-28387 CVE-2026-31790 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-28386	Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms	9.8 group max	<1%		Apr 7, 2026

From the original article

1 min read at helpnetsecurity.com

OpenSSL 3. 6. 2 patches eight CVEs across a range of components.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.