Search: CVE-2026-75805

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-75805Issue summary · A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate Medium5.3EPSS 0.3%2026-09-29GCVE DatabaseCVE-2026-75805 A vulnerability in OpenSSL's CMP client allows a NULL pointer dereference when requesting certificate revocation using a PKCS#10 CSR. This can cause the client to crash and result in a denial of service. The issue does not affect clients that identify certificates by certificate or issuer and serial number, and no FIPS modules are impacted. A patch is available to address this issue. EPSS 0.3%Vulnerability CWE-476 #ghsa-gpg3-m652-f2vc	GCVE Database	2026-09-29

Page 1 of 1