YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)

•

Sichere ProgrammierungHow to Build a Dart Package Analytics Tool with the pub.dev API: Beyond the 30-Day Window(23.09.2026 um 23:01 Uhr)

•

Sichere ProgrammierungThe Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors(24.09.2026 um 00:40 Uhr)

•

Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)

•

Sichere ProgrammierungCloudflare Separates AI Training From Search Indexing With New Crawler Controls(24.09.2026 um 00:45 Uhr)

•

Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)

•

Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)

•

Sichere ProgrammierungWhat two Contentful builds taught us about content models and publishing boundaries(24.09.2026 um 00:56 Uhr)

•

Sichere ProgrammierungNIGHTCELL 7: When the Ravens Lied, a second Þrøngva album made in code(24.09.2026 um 01:05 Uhr)

•

Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)

•

YouTube Security VideosMicrosoft Developer: Skill up on Copilot Studio Oct 8th!(24.09.2026 um 01:01 Uhr)

•

Sichere ProgrammierungHow to Build a Dart Package Analytics Tool with the pub.dev API: Beyond the 30-Day Window(23.09.2026 um 23:01 Uhr)

•

Sichere ProgrammierungThe Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors(24.09.2026 um 00:40 Uhr)

•

Sichere Programmierung🦄 Sharing DEV Followers Count on Github Profile 🦄(24.09.2026 um 00:42 Uhr)

•

Sichere ProgrammierungCloudflare Separates AI Training From Search Indexing With New Crawler Controls(24.09.2026 um 00:45 Uhr)

•

Sichere ProgrammierungHow I Would Build a Private AI Coding Workstation in 2026(24.09.2026 um 00:46 Uhr)

•

Sichere ProgrammierungBuilding a TWAP Distance-Based Polymarket Trading Strategy(24.09.2026 um 00:50 Uhr)

•

Sichere ProgrammierungWhat two Contentful builds taught us about content models and publishing boundaries(24.09.2026 um 00:56 Uhr)

•

Sichere ProgrammierungNIGHTCELL 7: When the Ravens Lied, a second Þrøngva album made in code(24.09.2026 um 01:05 Uhr)

•

Sichere ProgrammierungMy factual-recall tasks were scoring format, not facts(24.09.2026 um 01:15 Uhr)

•

Intelligence View

⚡ tsecurity.de Intelligence

CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

A vulnerability classified as problematic has been found in OpenSSL up to 3.0.20/3.4.5/3.5.6/3.6.2/4.0.0. This issue affects the function EVP_DecryptFinal_ex of the file /CMS/PKCS7/HPKE/QUIC of the component EVP Interface. Performing a…

Sicherheitslücken (CVE) vuldb.com 12.06.2026, 03:50 Uhr 1 Min. Lesezeit

↗ Quelle (vuldb.com)

Reagiere als Erste:r — dein Feedback zählt!

A vulnerability classified as problematic has been found in OpenSSL up to 3.0.20/3.4.5/3.5.6/3.6.2/4.0.0. This issue affects the function EVP_DecryptFinal_ex of the file /CMS/PKCS7/HPKE/QUIC of the component EVP Interface. Performing a manipulation results in missing cryptographic step.

This vulnerability is cataloged as CVE-2026-45446. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.

IoC Intelligence (1 Indikatoren)

CVE-2026-45446

CTI Threat Relationship Graph2 Knoten / 1 Relationen

CVE / Incident Software MITRE ATT&CK CWE Weakness IoC

IR-PLAYBOOK-VULN-REMEDIATION

MEDIUM

SOC Incident Playbook: Vulnerability Remediation & Verification

Asset Inventory

Asset-Datenbank nach betroffenen Komponenten, Versionen und exposed Ports abfragen.

nmap -sV --script vuln -p- <target-network>

Exploit MonitoringSofort

SIEM-Regeln und IDS-Signaturen (Snort/Suricata) auf Angriffsversuche schärfen.

tail -f /var/log/suricata/fast.log | grep <cve>

Patch DeploymentSofort

Patch oder offiziellen Workaround gemäß Hersteller-Empfehlung einspielen.

Check Vendor Security Advisory Bulletin

1-Click Detection Engineering: Sigma & YARA Rules

SOC Ready

title: Detect Exploitation - CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)
id: 421b86d2-2b01-4fae-827a-313ef1d57e14
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "CVE-2026-45446 | OpenSSL up to" ascii wide
    condition:
        any of them
}

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 2 Min

ciflow/trunk/187083: Move backend-specific c10d files into per-backend subfolders (#187083)

IT Security Downloads

NÄCHSTER BEITRAG 1 Min

Cybersicherheit: Erster KI-Exploit real im Einsatz dokumentiert - Börse Express

IT Security NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Auch interessante Nachrichten CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

Thematisch verwandte Begriffe: CVE202645446, OpenSSL, Interface, CMSPKCS7HPKEQUIC · 6 Treffer

Sicherheitslücken (CVE) 🛡️ Security Fix Linux, GNU/Linux, free softw

Critical 9.8 vulnerability in Unbound up to and including version 1.26.0

vor 3 Tagen 📆 20.09.2026 um 02:08 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · openclaw/openclaw

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

Release release-publish/91926f9b61a5-1789871489 von openclaw/openclaw auf GitHub: fix(release): repair 7.34 validation gates (#153190)

vor 3 Tagen 📆 20.09.2026 um 00:26 Uhr

Weiterlesen ↗

Sicherheitslücken (CVE) KitPloit - PenTest Tools!

haruspex v0.10.0

vor 3 Tagen 📆 20.09.2026 um 06:29 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

Automating Threat Intelligence: Integrating CVE Bots and Open Datasets into Your SecDevOps Pipeline

vor 3 Tagen 📆 20.09.2026 um 02:01 Uhr

Weiterlesen ↗

IT Security Downloads GitHub · openclaw/openclaw

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

Release v2026.7.34 von openclaw/openclaw auf GitHub: test(release): use entitled Gemini live model (#153189)

vor 3 Tagen 📆 20.09.2026 um 00:00 Uhr

Weiterlesen ↗

Sicherheitslücken (CVE) DEV Community

StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento

vor 4 Tagen 📆 19.09.2026 um 21:40 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

SOC Incident Playbook: Vulnerability Remediation & Verification

Auch interessante Nachrichten CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

Critical 9.8 vulnerability in Unbound up to and including version 1.26.0

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

haruspex v0.10.0

Automating Threat Intelligence: Integrating CVE Bots and Open Datasets into Your SecDevOps Pipeline

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento

tsecurity.de App

tsecurity.de Live Threat Radar

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen

🔖 Gespeicherte Artikel

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

SOC Incident Playbook: Vulnerability Remediation & Verification

Mehr aus dieser Kategorie

Auch interessante Nachrichten CVE-2026-45446 | OpenSSL up to 4.0.0 EVP Interface /CMS/PKCS7/HPKE/QUIC EVP_DecryptFinal_ex missing cryptographic step (Nessus ID 320634)

Critical 9.8 vulnerability in Unbound up to and including version 1.26.0

GitHub Release: openclaw/openclaw vrelease-publish/91926f9b61a5-1789871489 (20.09.2026)

haruspex v0.10.0

Automating Threat Intelligence: Integrating CVE Bots and Open Datasets into Your SecDevOps Pipeline

GitHub Release: openclaw/openclaw v2026.7.34 (20.09.2026)

StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento

tsecurity.de App

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

Community Radar & Live Chat

Community-Puls — was gerade passiert

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

🔖 Gespeicherte Artikel

Heiß diskutierte Einreichungen