CVE-2026-35191 | OpenSSL up to 3.5.8/3.6.4/4.0.2 QUIC expected behavior violation

September 29, 2026 Yanac

A vulnerability was found in OpenSSL up to 3.5.8/3.6.4/4.0.2. It has been declared as problematic. This affects an unknown part of the component QUIC. Executing a manipulation can lead to expected behavior violation.

The identification of this vulnerability is CVE-2026-35191. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More