Changeflow GovPing Data Privacy & Cybersecurity OpenSSL Vulnerability Advisory
Priority review Notice Added Final

OpenSSL Vulnerability Advisory

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 16th, 2026
Detected March 16th, 2026
Email

Summary

CERT-FR has issued an advisory regarding a vulnerability discovered in specific versions of OpenSSL. The advisory, dated March 16, 2026, references CVE-2026-2673 and urges users to consult the OpenSSL security bulletin for patch information.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has published an advisory (CERTFR-2026-AVI-0296) detailing a vulnerability affecting OpenSSL versions 3.5.x prior to 3.5.6 and 3.6.x prior to 3.6.2. The advisory, dated March 16, 2026, identifies the issue as CVE-2026-2673 and notes that the publisher has not specified the exact risk, but it allows an attacker to cause an unspecified security problem.

Organizations utilizing the affected OpenSSL versions must consult the official OpenSSL security bulletin (dated March 13, 2026) for information on obtaining and applying the necessary patches. Failure to address this vulnerability could expose systems to security risks, though specific consequences are not detailed by the publisher. This advisory is for informational purposes and does not impose direct regulatory obligations but highlights a critical security concern for system administrators and IT security professionals.

What to do next

  1. Review OpenSSL versions in use and identify if affected versions (3.5.x < 3.5.6, 3.6.x < 3.6.2) are deployed.
  2. Consult the OpenSSL security bulletin dated March 13, 2026, for details on the vulnerability (CVE-2026-2673).
  3. Apply available patches or updates for OpenSSL as recommended by the OpenSSL project to mitigate the security risk.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 16 mars 2026 N° CERTFR-2026-AVI-0296 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans OpenSSL

Gestion du document

| Référence | CERTFR-2026-AVI-0296 |
| Titre | Vulnérabilité dans OpenSSL |
| Date de la première version | 16 mars 2026 |
| Date de la dernière version | 16 mars 2026 |
| Source(s) | Bulletin de sécurité OpenSSL du 13 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • OpenSSL versions 3.5.x antérieures à 3.5.6
  • OpenSSL versions 3.6.x antérieures à 3.6.2

Résumé

Une vulnérabilité a été découverte dans OpenSSL. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 16 mars 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Kaspersky Products Identified
Priority review Mar 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Python Vulnerabilities Affect CPython Systems
Priority review Mar 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr CERT-FR: Multiple vulnerabilities in Mattermost Server
Priority review Mar 17, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for news.dli.mt.gov Montana DLI Warns About Phishing Scam
Priority review Mar 17, 2026 • news.dli.mt.gov • Labor & Employment
Favicon for www.maine.gov Maine Revenue Services Warns of W-2 Phishing Scams
Priority review Mar 17, 2026 • revenue • Tax
Favicon for wid.cert-bund.de Vercel Next.js Vulnerabilities Allow DoS or Security Bypass
Priority review Mar 17, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 16th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Technology companies
Geographic scope
National (France)

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software Vulnerabilities Information Security

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 163 Consumer Protection 29 Courts & Legal 206 Data Privacy & Cybersecurity 58 Defense & National Security 48 Education 20 Energy 93 Environment 81 Government & Legislation 240 Healthcare 104 Housing 15 Immigration 8 Insurance 16 Labor & Employment 104 Pharma & Drug Safety 68 Securities & Markets 69 Tax 48 Telecom & Technology 34 Trade & Sanctions 113 Transportation 53

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.