[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-34181":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":32,"aliases":33,"duplicate_of":9,"upstream":51,"downstream":52,"duplicates":74,"related":75,"reserved_at":9,"published_at":84,"modified_at":85,"state":86,"summary":87,"references_raw":96,"kevs":172,"epss":173,"epss_history":176,"metrics":447,"affected":465},"CVE-2026-34181","Issue Summary: The PKCS#12 file processing fails to perform sufficient input\nvalidation for files that use Password-Based Message Authentication Code 1\n(PBMAC1) integrity mechanism allowing a certificate and private key forgery.\n\nImpact Summary: An attacker impersonating a user can cause a service reading\nPKCS#12 files to accept forged certificates and private keys with a 1 in 256\nprobability.\n\nIf a service accepting PKCS#12 files is using passwords for authenticating\nthe received files, the attacker can create unencrypted PKCS#12 files that\nuse PBMAC1 authentication that specifies an HMAC key of only one byte, allowing\nthem to craft a file that will be accepted with a 1 in 256 probability.\nThat would then cause the service to accept a certificate and private key\ncontrolled by the attacker.\n\nThe FIPS modules are not affected by this issue, as the affected code is\noutside the OpenSSL FIPS module boundary.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-354","Improper Validation of Integrity Check Value","The product does not validate or incorrectly validates the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.","weakness","Draft","Base","Medium",[20,24,28],{"id":21,"name":22,"techniques":23},"CAPEC-145","Checksum Spoofing",[],{"id":25,"name":26,"techniques":27},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":29,"name":30,"techniques":31},"CAPEC-75","Manipulating Writeable Configuration Files",[],[],[34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50],"DEBIAN-CVE-2026-34181","UBUNTU-CVE-2026-34181","ALPINE-CVE-2026-34181","CGA-2p6j-cvxh-gg7m","CGA-5g4c-gpf6-xvxh","CGA-6jgq-q8x4-jwm9","CGA-mj3g-mrrh-cg33","CGA-6mfm-7wxw-mxvq","CGA-6xwr-94hq-793p","CGA-7h5g-qr4p-wf23","CGA-8fq7-p6jh-6g72","CGA-chg2-cqqg-v49q","CGA-gjf7-p6x7-hc8g","CGA-gvv2-j8p7-vfh6","CGA-r49g-mphp-66rm","CGA-vv4q-xhx2-5wqq","CGA-xj66-jrf4-4wpx",[],[53,55,56,58,59,60,62,64,66,68,70,72],{"_key":54},"USN-8414-1",{"_key":34},{"_key":57},"SUSE-SU-2026:2648-1",{"_key":36},{"_key":35},{"_key":61},"MGASA-2026-0253",{"_key":63},"OPENSUSE-SU-2026:11623-1",{"_key":65},"OPENSUSE-SU-2026:21744-1",{"_key":67},"SUSE-SU-2026:4039-1",{"_key":69},"SUSE-SU-2026:23463-1",{"_key":71},"RHSA-2026:25237",{"_key":73},"RHSA-2026:25239",[],[76,77,78,79,80,81,82],{"_key":57},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":54},{"_key":83},"CGA-VFRC-P9M8-WF7H","2026-06-09T16:03:22.065Z","2026-06-10T16:02:19.675Z","Analyzed",{"cisa_kev":88,"cisa_ransomware":88,"cisa_vendor":9,"epss_severity":89,"epss_score":90,"severity":91,"severity_score":92,"severity_version":93,"severity_source":94,"severity_vector":95,"severity_status":86},false,"low",0.00235,"high",7.4,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",[97,108,113,117,121,125,130,134,138,142,147,151,155,159,164,168],{"url":98,"sources":99,"tags":104},"https://openssl-library.org/news/secadv/20260609.txt",[94,100,101,102,103],"nvd","osv_ubuntu","osv_wolfi","osv_chainguard",[105,106,107],"Vendor Advisory","REPORT","Advisory",{"url":109,"sources":110,"tags":111},"https://github.com/openssl/security/commit/0300eb9ddce7a0895bf301a4b0c03a9da2313a0f",[94,100],[112],"Patch",{"url":114,"sources":115,"tags":116},"https://github.com/openssl/security/commit/ec36f2417c4ddd8cabce4b4a60a3d7a7365f2d81",[94,100],[112],{"url":118,"sources":119,"tags":120},"https://github.com/openssl/security/commit/85dcbb3abaa4878af5c8fbbe11bce708fcf984a7",[94,100],[112],{"url":122,"sources":123,"tags":124},"https://github.com/openssl/security/commit/79eb76a937e474bb7610a0a3dc57131dc8dc6610",[94,100],[112],{"url":126,"sources":127,"tags":128},"https://github.com/openssl/openssl/commit/0300eb9ddce7a0895bf301a4b0c03a9da2313a0f",[94,100,102,103],[112,129],"FIX",{"url":131,"sources":132,"tags":133},"https://github.com/openssl/openssl/commit/ec36f2417c4ddd8cabce4b4a60a3d7a7365f2d81",[94,100,102,103],[112,129],{"url":135,"sources":136,"tags":137},"https://github.com/openssl/openssl/commit/85dcbb3abaa4878af5c8fbbe11bce708fcf984a7",[94,100,102,103],[112,129],{"url":139,"sources":140,"tags":141},"https://github.com/openssl/openssl/commit/79eb76a937e474bb7610a0a3dc57131dc8dc6610",[94,100,102,103],[112,129],{"url":143,"sources":144,"tags":146},"https://security-tracker.debian.org/tracker/CVE-2026-34181",[145],"osv_debian",[107],{"url":148,"sources":149,"tags":150},"https://ubuntu.com/security/CVE-2026-34181",[101],[106],{"url":152,"sources":153,"tags":154},"https://www.cve.org/CVERecord?id=CVE-2026-34181",[101],[106],{"url":156,"sources":157,"tags":158},"https://ubuntu.com/security/notices/USN-8414-1",[101],[107],{"url":160,"sources":161,"tags":163},"https://security.alpinelinux.org/vuln/CVE-2026-34181",[162],"osv_alpine",[107],{"url":165,"sources":166,"tags":167},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/34xxx/CVE-2026-34181.json",[102,103],[107],{"url":169,"sources":170,"tags":171},"https://nvd.nist.gov/vuln/detail/CVE-2026-34181",[102,103],[107],[],{"date":174,"score":90,"percentile":175},"2026-09-19",0.14808,[177,181,185,188,191,193,197,200,204,207,210,213,216,219,223,226,229,232,235,238,241,244,247,250,253,256,259,261,264,267,270,272,275,278,281,284,287,290,293,296,298,301,304,307,310,313,316,319,322,325,328,331,334,337,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444],{"date":178,"score":179,"percentile":180},"2026-06-10",0.00004,0.00163,{"date":182,"score":183,"percentile":184},"2026-06-11",0.00006,0.00367,{"date":186,"score":179,"percentile":187},"2026-06-12",0.00207,{"date":189,"score":179,"percentile":190},"2026-06-13",0.00206,{"date":192,"score":179,"percentile":190},"2026-06-14",{"date":194,"score":195,"percentile":196},"2026-06-15",0.00194,0.09186,{"date":198,"score":195,"percentile":199},"2026-06-16",0.09203,{"date":201,"score":202,"percentile":203},"2026-06-17",0.00204,0.10337,{"date":205,"score":202,"percentile":206},"2026-06-18",0.10338,{"date":208,"score":202,"percentile":209},"2026-06-19",0.10307,{"date":211,"score":202,"percentile":212},"2026-06-20",0.10298,{"date":214,"score":202,"percentile":215},"2026-06-21",0.10268,{"date":217,"score":202,"percentile":218},"2026-06-22",0.10261,{"date":220,"score":221,"percentile":222},"2026-06-23",0.00196,0.09355,{"date":224,"score":221,"percentile":225},"2026-06-24",0.09369,{"date":227,"score":221,"percentile":228},"2026-06-25",0.09457,{"date":230,"score":221,"percentile":231},"2026-06-26",0.09489,{"date":233,"score":221,"percentile":234},"2026-06-27",0.09514,{"date":236,"score":221,"percentile":237},"2026-06-28",0.09478,{"date":239,"score":221,"percentile":240},"2026-06-29",0.09469,{"date":242,"score":221,"percentile":243},"2026-06-30",0.09474,{"date":245,"score":221,"percentile":246},"2026-07-01",0.09516,{"date":248,"score":221,"percentile":249},"2026-07-02",0.09508,{"date":251,"score":221,"percentile":252},"2026-07-03",0.09491,{"date":254,"score":221,"percentile":255},"2026-07-04",0.09487,{"date":257,"score":221,"percentile":258},"2026-07-05",0.0949,{"date":260,"score":221,"percentile":252},"2026-07-06",{"date":262,"score":221,"percentile":263},"2026-07-07",0.0948,{"date":265,"score":221,"percentile":266},"2026-07-08",0.09468,{"date":268,"score":221,"percentile":269},"2026-07-09",0.09472,{"date":271,"score":221,"percentile":240},"2026-07-10",{"date":273,"score":221,"percentile":274},"2026-07-11",0.09462,{"date":276,"score":221,"percentile":277},"2026-07-12",0.09454,{"date":279,"score":221,"percentile":280},"2026-07-13",0.09443,{"date":282,"score":221,"percentile":283},"2026-07-14",0.09461,{"date":285,"score":221,"percentile":286},"2026-07-15",0.09465,{"date":288,"score":221,"percentile":289},"2026-07-16",0.09473,{"date":291,"score":221,"percentile":292},"2026-07-17",0.09477,{"date":294,"score":221,"percentile":295},"2026-07-18",0.09467,{"date":297,"score":221,"percentile":277},"2026-07-19",{"date":299,"score":221,"percentile":300},"2026-07-20",0.09533,{"date":302,"score":221,"percentile":303},"2026-07-21",0.09528,{"date":305,"score":221,"percentile":306},"2026-07-22",0.09564,{"date":308,"score":221,"percentile":309},"2026-07-23",0.09543,{"date":311,"score":90,"percentile":312},"2026-07-24",0.14589,{"date":314,"score":90,"percentile":315},"2026-07-25",0.14663,{"date":317,"score":90,"percentile":318},"2026-07-26",0.14652,{"date":320,"score":90,"percentile":321},"2026-07-27",0.14623,{"date":323,"score":90,"percentile":324},"2026-07-28",0.1467,{"date":326,"score":90,"percentile":327},"2026-07-29",0.14656,{"date":329,"score":90,"percentile":330},"2026-07-30",0.14659,{"date":332,"score":90,"percentile":333},"2026-07-31",0.14657,{"date":335,"score":90,"percentile":336},"2026-08-01",0.14651,{"date":338,"score":90,"percentile":318},"2026-08-02",{"date":340,"score":90,"percentile":341},"2026-08-03",0.14654,{"date":343,"score":90,"percentile":344},"2026-08-04",0.14598,{"date":346,"score":90,"percentile":347},"2026-08-05",0.14541,{"date":349,"score":90,"percentile":350},"2026-08-06",0.14535,{"date":352,"score":90,"percentile":353},"2026-08-07",0.14519,{"date":355,"score":90,"percentile":356},"2026-08-08",0.14511,{"date":358,"score":90,"percentile":359},"2026-08-09",0.14497,{"date":361,"score":90,"percentile":362},"2026-08-10",0.14509,{"date":364,"score":90,"percentile":365},"2026-08-11",0.14592,{"date":367,"score":90,"percentile":368},"2026-08-12",0.14621,{"date":370,"score":90,"percentile":371},"2026-08-13",0.14617,{"date":373,"score":90,"percentile":374},"2026-08-14",0.14619,{"date":376,"score":90,"percentile":377},"2026-08-15",0.14776,{"date":379,"score":90,"percentile":380},"2026-08-16",0.148,{"date":382,"score":90,"percentile":383},"2026-08-17",0.14723,{"date":385,"score":90,"percentile":386},"2026-08-18",0.14731,{"date":388,"score":90,"percentile":389},"2026-08-19",0.14772,{"date":391,"score":90,"percentile":392},"2026-08-20",0.14781,{"date":394,"score":90,"percentile":395},"2026-08-21",0.14786,{"date":397,"score":90,"percentile":398},"2026-08-22",0.14785,{"date":400,"score":90,"percentile":401},"2026-08-23",0.14791,{"date":403,"score":90,"percentile":404},"2026-08-24",0.14265,{"date":406,"score":90,"percentile":407},"2026-08-25",0.14268,{"date":409,"score":90,"percentile":410},"2026-08-26",0.14316,{"date":412,"score":90,"percentile":413},"2026-08-27",0.14307,{"date":415,"score":90,"percentile":416},"2026-08-28",0.14332,{"date":418,"score":90,"percentile":419},"2026-08-29",0.14337,{"date":421,"score":90,"percentile":422},"2026-08-30",0.14347,{"date":424,"score":90,"percentile":425},"2026-08-31",0.14341,{"date":427,"score":90,"percentile":428},"2026-09-01",0.14355,{"date":430,"score":90,"percentile":431},"2026-09-02",0.1436,{"date":433,"score":90,"percentile":434},"2026-09-03",0.14361,{"date":436,"score":90,"percentile":437},"2026-09-04",0.14379,{"date":439,"score":90,"percentile":440},"2026-09-05",0.14409,{"date":442,"score":90,"percentile":443},"2026-09-06",0.14423,{"date":445,"score":90,"percentile":446},"2026-09-07",0.1441,[448,453,455,457,459,461,463],{"source":94,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":449,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":450,"vectorString":95,"impactScore":451,"exploitabilityScore":452},"HIGH",8.7,5.6,{"source":100,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":454,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":450,"vectorString":95,"impactScore":451,"exploitabilityScore":452},{"source":145,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":456,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":9,"vectorString":95,"impactScore":451,"exploitabilityScore":452},{"source":101,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":458,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":9,"vectorString":95,"impactScore":451,"exploitabilityScore":452},{"source":162,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":460,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":9,"vectorString":95,"impactScore":451,"exploitabilityScore":452},{"source":102,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":462,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":9,"vectorString":95,"impactScore":451,"exploitabilityScore":452},{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":464,"cvss_v4_0":9},{"baseScore":92,"baseSeverity":9,"vectorString":95,"impactScore":451,"exploitabilityScore":452},[466,482,490,494,497,503,507,511,515,520,523,534,542,546,550,558],{"ecosystem":467,"name":468,"vendor":469,"product":468,"cpe_part":9,"purl_type":470,"purl_namespace":469,"purl_name":468,"source":9,"versions":471},"Alpine Linux","openssl","alpine","apk",[472,480,481],{"version":473,"is_range":474,"range_type":475,"version_start":476,"version_start_type":477,"version_end":478,"version_end_type":479,"fixed_in":9},"gte3_4_0_lt3_5_7_r0",true,"ecosystem","3.4.0","including","3.5.7-r0","excluding",{"version":473,"is_range":474,"range_type":475,"version_start":476,"version_start_type":477,"version_end":478,"version_end_type":479,"fixed_in":9},{"version":473,"is_range":474,"range_type":475,"version_start":476,"version_start_type":477,"version_end":478,"version_end_type":479,"fixed_in":9},{"ecosystem":483,"name":484,"vendor":485,"product":484,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":484,"source":9,"versions":486},"Chainguard","libcrypto3","chainguard",[487],{"version":488,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":479,"fixed_in":9},"lt3_6_3_r0","3.6.3-r0",{"ecosystem":483,"name":491,"vendor":485,"product":491,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":491,"source":9,"versions":492},"libcrypto3-2.34",[493],{"version":488,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":479,"fixed_in":9},{"ecosystem":483,"name":468,"vendor":485,"product":468,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":468,"source":9,"versions":495},[496],{"version":488,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":479,"fixed_in":9},{"ecosystem":483,"name":498,"vendor":485,"product":498,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":498,"source":9,"versions":499},"openssl-provider-fips-3.4.0",[500],{"version":501,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":479,"fixed_in":9},"lt0","0",{"ecosystem":483,"name":504,"vendor":485,"product":504,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":504,"source":9,"versions":505},"openssl-provider-fips-3.4.0-dbg",[506],{"version":501,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":479,"fixed_in":9},{"ecosystem":483,"name":508,"vendor":485,"product":508,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":508,"source":9,"versions":509},"openssl-provider-fips-3.6.0",[510],{"version":501,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":479,"fixed_in":9},{"ecosystem":483,"name":512,"vendor":485,"product":512,"cpe_part":9,"purl_type":470,"purl_namespace":485,"purl_name":512,"source":9,"versions":513},"openssl-provider-fips-3.6.0-dbg",[514],{"version":501,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":502,"version_end_type":479,"fixed_in":9},{"ecosystem":516,"name":484,"vendor":517,"product":484,"cpe_part":9,"purl_type":470,"purl_namespace":517,"purl_name":484,"source":9,"versions":518},"Wolfi","wolfi",[519],{"version":488,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":479,"fixed_in":9},{"ecosystem":516,"name":468,"vendor":517,"product":468,"cpe_part":9,"purl_type":470,"purl_namespace":517,"purl_name":468,"source":9,"versions":521},[522],{"version":488,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":479,"fixed_in":9},{"ecosystem":524,"name":468,"vendor":525,"product":468,"cpe_part":9,"purl_type":526,"purl_namespace":525,"purl_name":468,"source":9,"versions":527},"Debian","debian","deb",[528,531],{"version":529,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":530,"version_end_type":479,"fixed_in":9},"lt3_5_6_1~deb13u2","3.5.6-1~deb13u2",{"version":532,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":533,"version_end_type":479,"fixed_in":9},"lt3_6_3_1","3.6.3-1",{"ecosystem":535,"name":536,"vendor":537,"product":536,"cpe_part":9,"purl_type":526,"purl_namespace":537,"purl_name":536,"source":9,"versions":538},"Ubuntu","edk2","ubuntu",[539,541],{"version":540,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":540,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":535,"name":543,"vendor":537,"product":543,"cpe_part":9,"purl_type":526,"purl_namespace":537,"purl_name":543,"source":9,"versions":544},"edk2-hwe",[545],{"version":540,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":535,"name":547,"vendor":537,"product":547,"cpe_part":9,"purl_type":526,"purl_namespace":537,"purl_name":547,"source":9,"versions":548},"nodejs",[549],{"version":540,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":535,"name":468,"vendor":537,"product":468,"cpe_part":9,"purl_type":526,"purl_namespace":537,"purl_name":468,"source":9,"versions":551},[552,555],{"version":553,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":554,"version_end_type":479,"fixed_in":9},"lt3_5_3_1ubuntu3_4","3.5.3-1ubuntu3.4",{"version":556,"is_range":474,"range_type":475,"version_start":9,"version_start_type":9,"version_end":557,"version_end_type":479,"fixed_in":9},"lt3_5_5_1ubuntu3_2","3.5.5-1ubuntu3.2",{"ecosystem":9,"name":559,"vendor":468,"product":468,"cpe_part":560,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":561},"OpenSSL","a",[562,566,570,574,578],{"version":563,"is_range":474,"range_type":94,"version_start":564,"version_start_type":477,"version_end":565,"version_end_type":479,"fixed_in":9},">= 4.0.0, \u003C 4.0.1","4.0.0","4.0.1",{"version":567,"is_range":474,"range_type":568,"version_start":476,"version_start_type":477,"version_end":569,"version_end_type":479,"fixed_in":9},"gte3.4.0_lt3.4.6","cpe","3.4.6",{"version":571,"is_range":474,"range_type":568,"version_start":572,"version_start_type":477,"version_end":573,"version_end_type":479,"fixed_in":9},"gte3.5.0_lt3.5.7","3.5.0","3.5.7",{"version":575,"is_range":474,"range_type":568,"version_start":576,"version_start_type":477,"version_end":577,"version_end_type":479,"fixed_in":9},"gte3.6.0_lt3.6.3","3.6.0","3.6.3",{"version":564,"is_range":88,"range_type":568,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]