# Multiple critical vulnerabilities in OpenSSL

Published: 2026-06-10 · Severity: routine
Canonical: https://vorant.io/reports/f3b57e61-a057-5426-9208-6bed3659bf8a/multiple-critical-vulnerabilities-in-openssl

> CERT-FR advises patching multiple OpenSSL vulnerabilities enabling remote code execution, denial of service, and data compromise.

CERT-FR has published an advisory documenting multiple vulnerabilities affecting OpenSSL across multiple version branches. Vulnerable versions include 1.0.x prior to 1.0.2zq, 1.1.x prior to 1.1.1zh, 3.0.x prior to 3.0.21, 3.4.x prior to 3.4.6, 3.5.x prior to 3.5.7, 3.6.x prior to 3.6.3, and 4.x prior to 4.0.1. The vulnerabilities collectively permit remote code execution, remote denial of service, data confidentiality breaches, integrity violations, and security policy bypass. Specific attack vectors and exploitation status are referenced in the OpenSSL security advisory dated 09 June 2026. Organizations must urgently apply patches from the OpenSSL vendor to all affected systems, prioritizing those exposed to untrusted network input.

## Mentioned in this report

- Vulnerabilities: CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-35188, CVE-2026-42764, CVE-2026-42765, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-42771, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-7383, CVE-2026-9076

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0717

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/f3b57e61-a057-5426-9208-6bed3659bf8a/multiple-critical-vulnerabilities-in-openssl.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup