CVE-2026-75803 | OpenSSL up to 4.0.1 AEAD Tag Verification EVP_Cipher integrity check

A vulnerability marked as critical has been reported in OpenSSL up to 3.0.21/3.4.6/3.5.7/3.6.3/4.0.1. The affected element is the function EVP_Cipher of the component AEAD Tag Verification. Performing a manipulation results in improper validation of integrity check value.

This vulnerability is cataloged as CVE-2026-75803. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More