UpHeron
All vulnerabilities

Servers and applications

CVE-2026-42769

Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation ineffectual, which could lead to escalation of credentials from the Registration Authority (RA) level to the root Certification Authority (root CA) level. Impact Summary: The Registration Autority could…

Severity
Medium 5.3
Published
9 Jun 2026
Last changed
23 Jul 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.4.6, 3.5.7, 3.6.3
Sources
NVD

Affected software

SoftwareAffected versions
OpenSSLServers and applications · cpe:a:openssl:openssl
  • From 3.4.0 before 3.4.6
  • From 3.5.0 before 3.5.7
  • From 3.6.0 before 3.6.3
  • Version 4.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-42769
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-42769