Ubuntu Multiple OpenSSL Vulnerabilities Disclosed Affecting Ubuntu Systems
Article Content
- •OpenSSL vulnerabilities disclosed on June 9, 2026, affecting multiple Ubuntu LTS versions.
- •Critical issues include CVE-2026-34180 and CVE-2026-34182, leading to potential denial of service.
- •Affected systems must update to the latest patches to mitigate risks from these vulnerabilities.
On June 9, 2026, multiple vulnerabilities in OpenSSL were disclosed, affecting various Ubuntu LTS versions including 14.04, 16.04, 18.04, 20.04, 25.10, and 26.04. Key vulnerabilities include a heap buffer over-read (CVE-2026-34180) that could lead to denial of service or information disclosure, and a flaw allowing forged CMS AuthEnvelopedData messages (CVE-2026-34182). Other issues include potential NULL pointer dereferences and memory growth problems. The vulnerabilities could be exploited by attackers to crash OpenSSL or bypass integrity checks. Affected systems are urged to apply the latest updates to mitigate these risks. The vulnerabilities were confirmed by multiple researchers and are now patched in the latest security updates.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (37)
Following this threat?
Track Ubuntu and CVE-2026-34180 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…