{"answers":{"affected":"It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-75806 in the wild and no public exploit code.","fix":"Upgrade to a fixed version.","what":"CVE-2026-75806 is a medium-severity vulnerability in Openssl Openssl, published on 29 Sep 2026."},"fix_prompt":"Check this codebase for CVE-2026-75806 and fix it if it is affected.\n\nWhat it is: CVE-2026-75806 is a medium-severity vulnerability in Openssl Openssl, published on 29 Sep 2026. \nExploitation: There is no known exploitation of CVE-2026-75806 in the wild and no public exploit code.\n\nAffected product: Openssl Openssl. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-75806/ (Markdown: https://insights.sbomify.com/CVE-2026-75806/index.md)","id":"CVE-2026-75806","markdown":"https://insights.sbomify.com/CVE-2026-75806/index.md","name":"CVE-2026-75806","record":{"aliases":["ALPINE-CVE-2026-75806","AZL-105354","AZL-105441","AZL-105486","AZL-105507","AZL-105597","AZL-105609","AZL-105714","AZL-105849","AZL-105897","BELL-CVE-2026-75806","CLEANSTART-2026-KP41215","DEBIAN-CVE-2026-75806","ECHO-c4dc-a1f8-f0ae","GHSA-4h8f-fwpc-hwwf","MINI-46c8-h957-fp9x","UBUNTU-CVE-2026-75806"],"analysis":null,"analysis_generated_by":null,"assigner":"openssl","cpe":[{"product":"openssl","vendor":"openssl"}],"cvss":{"score":5.3,"severity":"medium","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"cwes":[{"id":"CWE-1284","name":"Improper Validation of Specified Quantity in Input"}],"description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS","id":"CVE-2026-75806","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"openssl:openssl","products":["openssl:openssl"],"type":null,"year":"2026"},"n_packages":0,"n_references":5,"next":{"headline":"SAML Single Sign On \u003c= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning","id":"CVE-2026-75807"},"packages":[],"prev":{"headline":"NULL Pointer Dereference in CMP Client Revocation Response Handling","id":"CVE-2026-75805"},"products":["OpenSSL"],"published":"2026-09-29","related":[{"cvss_score":10,"headline":"Null dereference in n/a","id":"CVE-2009-3245","kev_date_added":null,"published":"2010-03-05"},{"cvss_score":10,"headline":"Memory corruption in n/a","id":"CVE-2006-3738","kev_date_added":null,"published":"2006-09-28"},{"cvss_score":9.8,"headline":"Untrusted Sender DN Used as Format String in CMP Response Validation","id":"CVE-2026-63073","kev_date_added":null,"published":"2026-08-25"},{"cvss_score":9.8,"headline":"Use after free in n/a","id":"CVE-2016-6309","kev_date_added":null,"published":"2016-09-26"},{"cvss_score":9.8,"headline":"Integer overflow in n/a","id":"CVE-2016-0799","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2016-2842","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2003-0545","kev_date_added":null,"published":"2003-10-01"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-29","vendors":["OpenSSL"]},"summary":null,"url":"https://insights.sbomify.com/CVE-2026-75806/"}