Vulnerability in OpenSSL (August 14, 2026)
A vulnerability has been discovered in OpenSSL. It allows an attacker to cause remote denial of service.
CSIRTS triage
- What
- A vulnerability in OpenSSL allows remote denial of service attacks.
- Who is affected
- Systems using affected versions of OpenSSL.
- Urgency
- Medium; denial of service impact is significant but less critical than code execution.
- Action
- Update OpenSSL to the patched version addressing CVE-2026-14456.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch OpenSSL
Get an email when a new OpenSSL advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1026/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-144560.61% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-14456 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownUSN-8678-1: OpenSSL vulnerabilitiesubuntu
- unknownDSA-6465-1 openssl - security updatedebian
- medium[NEW] [medium] OpenSSL: Vulnerability enables denial of servicecert-bund
- highCVE-2026-14456: Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial …nvd
- highCVE-2026-14456: Unbounded Memory Growth in QUIC Server Incoming Channel Queuemsrc
More from CERT-FR Avis de sécurité
- unknownMultiple vulnerabilities in Keycloak (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in Cisco IOS XE (August 25, 2026)2026-08-25
- unknownMultiple vulnerabilities in LibreNMS (August 24, 2026)2026-08-24
- unknownMultiple vulnerabilities in Metabase (August 24, 2026)2026-08-24
- unknownVulnerability in SPIP (August 21, 2026)2026-08-21