CVE-2026-63073 | OpenSSL up to 3.4.6/3.5.7/3.6.3/4.0.1 CMP ossl_cmp_msg_check_update format format string

August 25, 2026 Yanac

A vulnerability has been found in OpenSSL up to 3.4.6/3.5.7/3.6.3/4.0.1 and classified as problematic. This impacts the function ossl_cmp_msg_check_update of the component CMP. This manipulation of the argument format causes format string.

This vulnerability is handled as CVE-2026-63073. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More