PT-2026-25314 · Openssl+2 · Openssl 1.1.1+9

Viktor Dukhovni · Published 2026-01-01 · Updated 2026-05-18 · CVE-2026-2673

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.5 and 3.6 OpenSSL versions prior to 3.4 OpenSSL versions prior to 3.3 OpenSSL versions prior to 3.0 OpenSSL versions prior to 1.0.2 OpenSSL versions prior to 1.1.1

Description An issue exists in OpenSSL TLS 1.3 servers where the server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. This can result in a less preferred key exchange being used, even when a more secure group is supported by both the client and server, if the preferred group was not included in the client's initial keyshare predictions. This is particularly relevant with new hybrid post-quantum groups, where the client might defer their use until specifically requested by the server. The root cause is an implementation defect that causes the 'DEFAULT' list to lose its 'tuple' structure, treating all server-supported groups as a single sufficiently secure tuple, and preventing the server from sending a Hello Retry Request (HRR) when a more preferred group is mutually supported. The issue does not affect OpenSSL FIPS modules.

Recommendations OpenSSL version 3.6 users should upgrade to OpenSSL 3.6.2 once it is released. OpenSSL version 3.5 users should upgrade to OpenSSL 3.5.6 once it is released. OpenSSL versions prior to 3.4 should be upgraded. OpenSSL versions prior to 3.3 should be upgraded. OpenSSL versions prior to 3.0 should be upgraded. OpenSSL versions prior to 1.0.2 should be upgraded. OpenSSL versions prior to 1.1.1 should be upgraded.

Fix

Weakness Enumeration

CWE-757

Related Identifiers

CVE-2026-2673

JLSEC-2026-271

OPENSUSE-SU-2026:10533-1

OPENSUSE-SU-2026:20525-1

RHSA-2026:7261

SUSE-SU-2026:21107-1

SUSE-SU-2026:21186-1

USN-8155-1

Affected Products

Linuxmint

Openssl 1.0.2

Openssl 1.1.1

Openssl 3.0

Openssl 3.3

Openssl 3.4

Openssl 3.5

Openssl 3.6

Openssl

Ubuntu

References · 65

• https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f · Patch
• https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-2673 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-2673 · Security Note
• https://osv.dev/vulnerability/JLSEC-2026-271 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31790 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-2673 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31789 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21107-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-2673 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28389 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20525-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-28388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2673 · Security Note
• https://ubuntu.com/security/CVE-2026-2673 · Vendor Advisory