Search: CVE-2026-63076

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 1.6%	CVE-2026-63076Issue summary · OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 High7.5EPSS 1.6%2026-08-25GCVE DatabaseCVE-2026-63076 A vulnerability in Node.js related to OpenSSL CMP password-based protection verification causes the check to only verify that the protectionAlg parameter is not NULL, without properly validating its ASN.1 structure. This issue is tracked as CVE-2026-63076 and affects multiple specific Node.js versions, primarily in Ubuntu packages. The vulnerability has a CVSS score of 7.5, indicating a medium severity with a potential impact on availability. A patch is available to address this issue. EPSS 1.6%Vulnerability CWE-476 #microsoft-security-response-ce	GCVE Database	2026-08-25

Page 1 of 1