Changeflow GovPing Data Privacy & Cybersecurity OpenBSD Vulnerability Enables Unspecified Remot...
Priority review Guidance Added Final

OpenBSD Vulnerability Enables Unspecified Remote Attack

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund issued a security advisory regarding a high-severity vulnerability (CVSS 7.3) in OpenBSD versions 7.7 and 7.8 that enables remote attacks by unauthenticated threat actors. The vulnerability allows remote code execution without user interaction. Organizations running affected OpenBSD systems should review and apply available mitigations immediately.

What changed

CERT-Bund published security advisory WID-SEC-2026-0982 disclosing a high-severity vulnerability in OpenBSD (CVSS 7.3 Base, 6.4 Temporal) affecting versions 7.7 and 7.8. The flaw allows remote attackers to conduct unspecified attacks against affected systems without authentication. Mitigation measures are available and recommended.\n\nOrganizations operating OpenBSD servers or infrastructure should prioritize vulnerability assessment and patching. While no specific CVE identifier or patch URL is provided in the advisory, security teams should monitor OpenBSD security mailing lists and vendor channels for official patches. The vulnerability's high CVSS score and remote attack vector make it a priority for organizations with internet-exposed OpenBSD systems.

What to do next

  1. Identify systems running OpenBSD versions 7.7 or 7.8 in your infrastructure
  2. Apply available security patches or mitigations for CVE-2026-0982
  3. Review network controls and apply defense-in-depth measures if immediate patching is not feasible

Archived snapshot

Apr 7, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-0982] OpenBSD: Schwachstelle ermöglicht nicht spezifizierten Angriff CVSS Base Score 7.3 (hoch) CVSS Temporal Score 6.4 (mittel) Remoteangriff ja Datum 06.04.2026 Stand 07.04.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • UNIX

Produktbeschreibung

OpenBSD ist ein Unix-artiges Betriebssystem, abgeleitet von BSD-Unix.

Produkte

06.04.2026
- OpenBSD OpenBSD 7.7

  • OpenBSD OpenBSD 7.8

Angriff

Angriff

Ein entfernter Angreifer kann eine Schwachstelle in OpenBSD ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
CERT-Bund
Published
April 6th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Minor
Document ID
WID-SEC-2026-0982

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability remediation System patching
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!