High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 5.9.4 : patch affected systems soon.
Data as of 30 Sep 2026, 07:04 UTC
Rated High by SecurityWeek
- Patch
- Available – fixed in 5.9.4
What to do
AI-suggested
Users should upgrade OpenSSL to the latest patched versions that address CVE-2026-84782, CVE-2026-84783, and other vulnerabilities. Similarly, WolfSSL users should update to version 5.9.4 or later to mitigate the authentication bypass and other security issues. Vendors managing integrations with affected libraries should verify their configurations and apply patches promptly. No additional mitigations are indicated beyond applying these official fixes.
Description
Multiple high-severity vulnerabilities were patched in the OpenSSL and WolfSSL cryptographic libraries. OpenSSL fixed 14 vulnerabilities including a critical DTLS handshake flaw (CVE-2026-84782) that can leak heap memory or cause application crashes, and a medium-severity denial-of-service issue (CVE-2026-84783). WolfSSL patched 11 vulnerabilities, including three high-severity flaws that allow authentication bypass under certain configurations. These issues affect integrations with popular software such as Nginx, HAProxy, and Apache httpd. Most other vulnerabilities are medium or low severity and involve denial-of-service or certificate validation issues. No known exploits in the wild have been reported.