CVE-2026-75805 | OpenSSL up to 4.0.2 CMP Client OSSL_CMP_exec_RR_ses null pointer dereference

September 29, 2026 Yanac

A vulnerability was found in OpenSSL up to 3.0.22/3.4.7/3.5.8/3.6.4/4.0.2. It has been classified as problematic. This issue affects the function OSSL_CMP_exec_RR_ses of the component CMP Client. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-75805. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More