OpenSSL Vulnerability Allows Bypassing Security Measures

CERT-Bund has released security advisory WID-SEC-2026-0729 concerning a vulnerability in OpenSSL versions prior to 3.6.2 and 3.5.6. The vulnerability, rated with a low CVSS Base Score of 3.1 and a low Temporal Score of 2.7, allows a remote, authenticated attacker to bypass security measures. This advisory applies to systems running UNIX and Windows, and potentially other operating systems.

Organizations utilizing affected OpenSSL versions should apply the available mitigation as soon as possible to prevent exploitation. While the advisory does not specify a compliance deadline, prompt action is recommended to address the security risk and prevent potential unauthorized access or data breaches. Further details on the specific CVE and available information can be found via the provided links.