Known Vulnerabilities for Openssl by Redhat
Listed below are 9 of the newest known vulnerabilities associated with "Openssl" by "Redhat".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84964 json | A double free in the OpenSSL-based TLS certificate revocation checking path of the MongoDB C Driver can be reached by a TLS e... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-81717 json | openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose t... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81716 json | openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, wh... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81715 json | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positi... | Not Provided | 2026-08-27 | 2026-08-28 |
| CVE-2026-81714 json | openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when bi... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81705 json | openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bun... | Not Provided | 2026-08-27 | 2026-08-27 |
| CVE-2026-81697 json | openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 contain a CWD-relative configuration file resolution flaw in ... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-81694 json | openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-... | Not Provided | 2026-08-27 | 2026-08-28 |
| CVE-2026-81692 json | openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field ... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-81690 json | openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. ... | Not Provided | 2026-08-27 | 2026-08-27 |