Search: CVE-2026-42770

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.5%	CVE-2026-42770Issue summary · When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup Low3.7EPSS 0.5%2026-06-09GCVE DatabaseCVE-2026-42770 CVE-2026-42770 is a low severity vulnerability affecting FFC-DH peer validation in Microsoft products including Azure Linux and OpenSSL 3.0. The issue involves improper use of an attacker-supplied parameter 'q' during cryptographic validation, potentially weakening the security of Diffie-Hellman key exchanges. EPSS 0.5%Vulnerability CWE-325 #ghsa-3cxm-476w-ghm2 #microsoft-security-response-ce	GCVE Database	2026-06-09

Page 1 of 1