Skip to content
Critical OpenSSL Vulnerabilities Affect Ubuntu 26.04 LTS

Critical OpenSSL Vulnerabilities Affect Ubuntu 26.04 LTS

First seen 29 Sep 2026, 23:05 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 29, 2026 at 23:06 UTC
  • •OpenSSL vulnerabilities could lead to denial of service and data exposure.
  • •Ubuntu 26.04 LTS is specifically affected by these issues.
  • •Patches are available; immediate updates are recommended.

Multiple vulnerabilities in OpenSSL have been disclosed, impacting Ubuntu 26.04 LTS. Key issues include improper handling of certificate revocation lists (CVE-2026-35189), QUIC unvalidated amplification credit accounting (CVE-2026-35191), and scalar multiplication for non-NIST elliptic curves (CVE-2026-54872). These vulnerabilities could lead to denial of service attacks and timing side-channel attacks that expose sensitive information. The vulnerabilities have been patched, and users are advised to update their systems immediately. The issues were published on 2026-09-29, and CISA has confirmed their severity. Affected users should ensure they are running the latest versions of OpenSSL to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-29
OpenSSL vulnerabilities disclosed
Multiple vulnerabilities in OpenSSL affecting Ubuntu 26.04 LTS were disclosed, including CVE-2026-35189 and CVE-2026-35191.
Ubuntu
2026-09-29
Patches released for vulnerabilities
Ubuntu released patches for OpenSSL vulnerabilities, urging users to update to the latest versions immediately.
Linuxsecurity
2026-09-29
CVE-2026-54872 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-84784 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-35189 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-75806 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-77696 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-54875 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-75805 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-29
CVE-2026-84782 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (3)

Following this threat?

Track Ubuntu and CVE-2026-35189 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 3