How many CVEs does OpenSSL OpenSSL 3.6 have?

OpenSSL OpenSSL 3.6 has 1 published CVE records since 2026.

How many OpenSSL OpenSSL 3.6 CVEs are in CISA KEV?

None of OpenSSL OpenSSL 3.6's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for OpenSSL OpenSSL 3.6 vulnerabilities?

Yes — 1 of OpenSSL OpenSSL 3.6's CVEs have a known public exploit.

What are the most common weakness types in OpenSSL OpenSSL 3.6 CVEs?

OpenSSL OpenSSL 3.6's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference).

What is the average severity of OpenSSL OpenSSL 3.6 CVEs?

The average CVSS base score across OpenSSL OpenSSL 3.6's scored CVEs is 6.1.

OpenSSL 3.6 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: OpenSSL 3.6 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

OpenSSL 3.6 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

OpenSSL 3.6 has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

Severity and exploitation

How the CVSS severity of OpenSSL 3.6's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of OpenSSL 3.6's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of OpenSSL 3.6's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every OpenSSL 3.6 version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for OpenSSL 3.6; the CVEs below apply to the product without a version pin.

1 CVE

Sort

Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
CVE-2025-11187
Public exploit
Patch
CWE-476
Medium · CVSS 6.1
EPSS 5.1% (92th pct)2026-01-27

Common weakness types

The CWE weakness categories most often found in OpenSSL 3.6 CVEs. Follow any weakness for its full explanation.

CWE-476NULL Pointer Dereference1 CVE

Other OpenSSL products

Browse vulnerabilities for other products by OpenSSL.

openssl331 CVEs OpenSSL 1.1.1-1.1.1s2 CVEs OpenSSL 3.0.0-3.0.72 CVEs fips object module1 CVEs OpenSSL 1.0.11 CVEs OpenSSL 1.0.2-1.0.2zf1 CVEs OpenSSL 3.41 CVEs OpenSSL 3.5

Frequently asked questions

Common questions about OpenSSL 3.6 vulnerabilities.

How many CVEs does OpenSSL OpenSSL 3.6 have?: OpenSSL OpenSSL 3.6 has 1 published CVE records since 2026.
How many OpenSSL OpenSSL 3.6 CVEs are in CISA KEV?: None of OpenSSL OpenSSL 3.6's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for OpenSSL OpenSSL 3.6 vulnerabilities?: Yes — 1 of OpenSSL OpenSSL 3.6's CVEs have a known public exploit.
What are the most common weakness types in OpenSSL OpenSSL 3.6 CVEs?: OpenSSL OpenSSL 3.6's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference).
What is the average severity of OpenSSL OpenSSL 3.6 CVEs?: The average CVSS base score across OpenSSL OpenSSL 3.6's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track OpenSSL 3.6 vulnerabilities

Get an alert for each new OpenSSL 3.6 CVE, with AI-written analysis and remediation steps.

Create an account See pricing