📋 ADVISORIES
- OpenSSL and WolfSSL Patch High-Severity Vulnerabilities in Crypto Libraries OpenSSL and WolfSSL have each released patches for roughly a dozen vulnerabilities, including high-severity flaws.
- OpenSSL fixed 14 vulnerabilities, including high-severity CVE-2026-84782 (CVSS 8.2), which lets a remote unauthenticated peer leak heap memory fragments or crash DTLS applications during handshake retransmission
- OpenSSL also patched medium-severity CVE-2026-84783, a DoS flaw crashing multi-threaded TLS clients, plus low-severity issues including QUIC DDoS amplification and timing side channels that could aid private key recovery
- WolfSSL version 5.9.4 patches 11 vulnerabilities, including three high-severity peer authentication bypass flaws: CVE-2026-93302, CVE-2026-89102, and CVE-2026-89136
- WolfSSL's high-severity flaws affect builds integrated with Nginx, HAProxy, Stunnel, Apache httpd, and other applications
- WolfSSL's medium-severity bugs include certificate validation defects allowing server impersonation via TLS 1.2 or DTLS 1.2 handshakes 📎 Coverage: securityweek.com · 👁 via SecurityWeek
🔓 CVEs & KEV
- CVE-2026-103110 — Pexip Infinity — CVSS 9.8 — Pexip Infinity Input Validation Flaw Leads to Remote Code Execution