[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-14457":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":39,"downstream":40,"duplicates":67,"related":68,"reserved_at":9,"published_at":77,"modified_at":78,"state":79,"summary":80,"references_raw":89,"kevs":148,"epss":149,"epss_history":152,"metrics":226,"affected":242},"CVE-2026-14457","Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs)\nenabled, and only the private key (with no associated certificate) configured locally,\na NULL pointer dereference may occur when the remote peer solicits raw public keys and\nalso sends the typically omitted \"signature_algorithms_cert\" TLS extension.\n\nImpact summary: The impact is limited to a possible Denial of Service as a result of\nan application abort, no data disclosure or remote command execution are possible.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: While a passing comment in sample code in the documentation suggests\nthat key-only RPK configurations are supported, the best-practice RPK configuration\nis to always configure a corresponding certificate (possibly self-signed or\nsigned by any convenient CA).\n\nWhen the private key is configured along with a matching certificate, the\n\"signature_algorithms_cert\" extension is handled reliably even without the\nfix, and peer clients or servers that don't support raw public keys may be\nable to complete a TLS connection by pinning or verifying the corresponding\ncertificate or its public key.\n\nDeployments that prefer to configure just a private key with no certificate\nneed to upgrade to an updated release as noted below.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the SSL protocol implementation\nis outside the OpenSSL FIPS module boundary.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[],[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"DEBIAN-CVE-2026-14457","UBUNTU-CVE-2026-14457","ALPINE-CVE-2026-14457","CGA-35c3-q5pq-33gc","CGA-3p74-6595-jgf5","CGA-76vj-3852-4j3g","CGA-79m7-3rq6-5j5w","CGA-9jh2-3h5f-gxw4","CGA-c869-f247-fq3g","CGA-h7q5-7hgh-74hm","CGA-jj9r-wmvq-c983","CGA-m2rf-j79c-j7xh","CGA-v66f-cmxf-r3wp","CGA-wmgj-29gc-5f7w","CGA-wxfp-hvw9-hg7p","CGA-x7f5-hjr6-8qfv","CGA-xwfj-hq7w-64q2",[],[41,43,45,47,49,51,53,55,57,59,61,63,65],{"_key":42},"OPENSUSE-SU-2026:11623-1",{"_key":44},"MGASA-2026-0353",{"_key":46},"USN-8678-1",{"_key":48},"OPENSUSE-SU-2026:21744-1",{"_key":50},"SUSE-SU-2026:4038-1",{"_key":52},"SUSE-SU-2026:4039-1",{"_key":54},"SUSE-SU-2026:4040-1",{"_key":56},"RHSA-2026:59635",{"_key":58},"RHSA-2026:59641",{"_key":60},"SUSE-SU-2026:23463-1",{"_key":62},"RHSA-2026:67154",{"_key":64},"RHSA-2026:67165",{"_key":66},"SUSE-SU-2026:23538-1",[],[69,70,71,72,73,74,75,76],{"_key":42},{"_key":48},{"_key":50},{"_key":52},{"_key":54},{"_key":60},{"_key":66},{"_key":46},"2026-08-25T12:58:29.349Z","2026-08-25T14:13:27.811Z","Analyzed",{"cisa_kev":81,"cisa_ransomware":81,"cisa_vendor":9,"epss_severity":82,"epss_score":83,"severity":84,"severity_score":85,"severity_version":86,"severity_source":87,"severity_vector":88,"severity_status":79},false,"low",0.00984,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[90,98,104,108,112,116,121,127,131,135,140,144],{"url":91,"sources":92,"tags":95},"https://openssl-library.org/news/secadv/20260825.txt",[87,93,94],"nvd","osv_chainguard",[96,97],"Vendor Advisory","Advisory",{"url":99,"sources":100,"tags":101},"https://github.com/openssl/openssl/commit/dad836b071da6579510c968615848ba03cac593b",[87,93,94],[102,103],"Patch","FIX",{"url":105,"sources":106,"tags":107},"https://github.com/openssl/openssl/commit/581aaa0f0a35d214740f0fe1f5283ec41f1212e1",[87,93,94],[102,103],{"url":109,"sources":110,"tags":111},"https://github.com/openssl/openssl/commit/d0af20478688a6aa2f59d61caa3f82136b181d7f",[87,93,94],[102,103],{"url":113,"sources":114,"tags":115},"https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76",[87,93,94],[102,103],{"url":117,"sources":118,"tags":120},"https://security-tracker.debian.org/tracker/CVE-2026-14457",[119],"osv_debian",[97],{"url":122,"sources":123,"tags":125},"https://ubuntu.com/security/CVE-2026-14457",[124],"osv_ubuntu",[126],"REPORT",{"url":128,"sources":129,"tags":130},"https://www.cve.org/CVERecord?id=CVE-2026-14457",[124],[126],{"url":132,"sources":133,"tags":134},"https://ubuntu.com/security/notices/USN-8678-1",[124],[97],{"url":136,"sources":137,"tags":139},"https://security.alpinelinux.org/vuln/CVE-2026-14457",[138],"osv_alpine",[97],{"url":141,"sources":142,"tags":143},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14457.json",[94],[97],{"url":145,"sources":146,"tags":147},"https://nvd.nist.gov/vuln/detail/CVE-2026-14457",[94],[97],[],{"date":150,"score":83,"percentile":151},"2026-09-19",0.60802,[153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225],{"date":154,"score":83,"percentile":155},"2026-08-26",0.59735,{"date":157,"score":83,"percentile":158},"2026-08-27",0.59772,{"date":160,"score":83,"percentile":161},"2026-08-28",0.59316,{"date":163,"score":83,"percentile":164},"2026-08-29",0.59347,{"date":166,"score":83,"percentile":167},"2026-08-30",0.59852,{"date":169,"score":83,"percentile":170},"2026-08-31",0.59862,{"date":172,"score":83,"percentile":173},"2026-09-01",0.59886,{"date":175,"score":83,"percentile":176},"2026-09-02",0.59929,{"date":178,"score":83,"percentile":179},"2026-09-03",0.59953,{"date":181,"score":83,"percentile":182},"2026-09-04",0.59983,{"date":184,"score":83,"percentile":185},"2026-09-05",0.59531,{"date":187,"score":83,"percentile":188},"2026-09-06",0.60033,{"date":190,"score":83,"percentile":191},"2026-09-07",0.60041,{"date":193,"score":83,"percentile":194},"2026-09-08",0.60057,{"date":196,"score":83,"percentile":197},"2026-09-09",0.60239,{"date":199,"score":83,"percentile":200},"2026-09-10",0.60263,{"date":202,"score":83,"percentile":203},"2026-09-11",0.60293,{"date":205,"score":83,"percentile":206},"2026-09-12",0.60357,{"date":208,"score":83,"percentile":209},"2026-09-13",0.60354,{"date":211,"score":83,"percentile":212},"2026-09-14",0.60378,{"date":214,"score":83,"percentile":215},"2026-09-15",0.60446,{"date":217,"score":83,"percentile":218},"2026-09-16",0.60586,{"date":220,"score":83,"percentile":221},"2026-09-17",0.60658,{"date":223,"score":83,"percentile":224},"2026-09-18",0.60764,{"date":150,"score":83,"percentile":151},[227,232,234,236,238,240],{"source":87,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":228,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":229,"vectorString":88,"impactScore":230,"exploitabilityScore":231},"HIGH",6,10,{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":233,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":229,"vectorString":88,"impactScore":230,"exploitabilityScore":231},{"source":138,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":235,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":9,"vectorString":88,"impactScore":230,"exploitabilityScore":231},{"source":119,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":237,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":9,"vectorString":88,"impactScore":230,"exploitabilityScore":231},{"source":124,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":239,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":9,"vectorString":88,"impactScore":230,"exploitabilityScore":231},{"source":94,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":241,"cvss_v4_0":9},{"baseScore":85,"baseSeverity":9,"vectorString":88,"impactScore":230,"exploitabilityScore":231},[243,263,273,278,283,290,294,298,303,315,321,325,329,334,338],{"ecosystem":244,"name":245,"vendor":246,"product":245,"cpe_part":9,"purl_type":247,"purl_namespace":246,"purl_name":245,"source":9,"versions":248},"Alpine Linux","openssl","alpine","apk",[249,255,256,257,261,262],{"version":250,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":253,"version_end_type":254,"fixed_in":9},"lt3_5_8_r0",true,"ecosystem","3.5.8-r0","excluding",{"version":250,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":253,"version_end_type":254,"fixed_in":9},{"version":250,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":253,"version_end_type":254,"fixed_in":9},{"version":258,"is_range":251,"range_type":252,"version_start":259,"version_start_type":260,"version_end":253,"version_end_type":254,"fixed_in":9},"gte3_4_0_lt3_5_8_r0","3.4.0","including",{"version":258,"is_range":251,"range_type":252,"version_start":259,"version_start_type":260,"version_end":253,"version_end_type":254,"fixed_in":9},{"version":258,"is_range":251,"range_type":252,"version_start":259,"version_start_type":260,"version_end":253,"version_end_type":254,"fixed_in":9},{"ecosystem":264,"name":265,"vendor":266,"product":265,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":265,"source":9,"versions":267},"Chainguard","eco-python-openssl-4","chainguard",[268,270],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":271,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":272,"version_end_type":254,"fixed_in":9},"lt4_0_2_r0","4.0.2-r0",{"ecosystem":264,"name":274,"vendor":266,"product":274,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":274,"source":9,"versions":275},"eco-python-openssl-4-pyca",[276,277],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":271,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":272,"version_end_type":254,"fixed_in":9},{"ecosystem":264,"name":279,"vendor":266,"product":279,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":279,"source":9,"versions":280},"eco-python-openssl-4-pyca-dev",[281,282],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":271,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":272,"version_end_type":254,"fixed_in":9},{"ecosystem":264,"name":284,"vendor":266,"product":284,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":284,"source":9,"versions":285},"openssl-provider-fips-3.4.0",[286,287],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":289,"version_end_type":254,"fixed_in":9},"lt0","0",{"ecosystem":264,"name":291,"vendor":266,"product":291,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":291,"source":9,"versions":292},"openssl-provider-fips-3.4.0-dbg",[293],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":264,"name":295,"vendor":266,"product":295,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":295,"source":9,"versions":296},"openssl-provider-fips-3.6.0",[297],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":264,"name":299,"vendor":266,"product":299,"cpe_part":9,"purl_type":247,"purl_namespace":266,"purl_name":299,"source":9,"versions":300},"openssl-provider-fips-3.6.0-dbg",[301,302],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":288,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":289,"version_end_type":254,"fixed_in":9},{"ecosystem":304,"name":245,"vendor":305,"product":245,"cpe_part":9,"purl_type":306,"purl_namespace":305,"purl_name":245,"source":9,"versions":307},"Debian","debian","deb",[308,309,312],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":310,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":311,"version_end_type":254,"fixed_in":9},"lt3_5_7_1~deb13u2","3.5.7-1~deb13u2",{"version":313,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":314,"version_end_type":254,"fixed_in":9},"lt3_6_4_1","3.6.4-1",{"ecosystem":316,"name":317,"vendor":318,"product":317,"cpe_part":9,"purl_type":306,"purl_namespace":318,"purl_name":317,"source":9,"versions":319},"Ubuntu","edk2","ubuntu",[320],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":316,"name":322,"vendor":318,"product":322,"cpe_part":9,"purl_type":306,"purl_namespace":318,"purl_name":322,"source":9,"versions":323},"edk2-hwe",[324],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":316,"name":326,"vendor":318,"product":326,"cpe_part":9,"purl_type":306,"purl_namespace":318,"purl_name":326,"source":9,"versions":327},"nodejs",[328],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":316,"name":245,"vendor":318,"product":245,"cpe_part":9,"purl_type":306,"purl_namespace":318,"purl_name":245,"source":9,"versions":330},[331],{"version":332,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":333,"version_end_type":254,"fixed_in":9},"lt3_5_5_1ubuntu3_4","3.5.5-1ubuntu3.4",{"ecosystem":316,"name":335,"vendor":318,"product":335,"cpe_part":9,"purl_type":306,"purl_namespace":318,"purl_name":335,"source":9,"versions":336},"openssl-fips",[337],{"version":269,"is_range":251,"range_type":252,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":339,"vendor":245,"product":245,"cpe_part":340,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":341},"OpenSSL","a",[342,346,350,354],{"version":343,"is_range":251,"range_type":344,"version_start":259,"version_start_type":260,"version_end":345,"version_end_type":254,"fixed_in":9},"gte3.4.0_lt3.4.7","cpe","3.4.7",{"version":347,"is_range":251,"range_type":344,"version_start":348,"version_start_type":260,"version_end":349,"version_end_type":254,"fixed_in":9},"gte3.5.0_lt3.5.8","3.5.0","3.5.8",{"version":351,"is_range":251,"range_type":344,"version_start":352,"version_start_type":260,"version_end":353,"version_end_type":254,"fixed_in":9},"gte3.6.0_lt3.6.4","3.6.0","3.6.4",{"version":355,"is_range":251,"range_type":344,"version_start":356,"version_start_type":260,"version_end":357,"version_end_type":254,"fixed_in":9},"gte4.0.0_lt4.0.2","4.0.0","4.0.2"]