LibreSSL
- Software type
- Cryptography
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/12/2026, LibreSSL recorded 4 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of LibreSSL and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-118374OpenBSD LibreSSL ocspcheck memory exhaustion via unbounded OCSP HTTP responsesCVE-2026-118373LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()CVE-2026-118372LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL PathCVE-2026-118371LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-118374OpenBSD LibreSSL ocspcheck memory exhaustion via unbounded OCSP HTTP responses | Exploitation statusNot exploited | FixYes | Published10/28/2026 | SeverityHigh |
CVE-2026-118373LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host() | Exploitation statusNot confirmed | FixYes | Published10/28/2026 | SeverityMedium |
CVE-2026-118372LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path | Exploitation statusNot exploited | FixYes | Published10/28/2026 | SeverityMedium |
CVE-2026-118371LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line | Exploitation statusNot confirmed | FixYes | Published10/28/2026 | SeverityMedium |
4 Results | Page 1 of 1