OpenSSL Product Security Update Advisory (CVE-2026-2673)

overview

We have released security updates to address vulnerabilities in our OpenSSL products. users of affected products are encouraged to update to the latest version.

affected products

CVE-2026-2673

OpenSSL Version: 3.6
OpenSSL version: 3.5

resolved vulnerabilities

Key Exchange Group Negotiation Error Vulnerability in OpenSSL (CVE-2026-2673)

vulnerability patches

Vulnerability patches have been made available in the latest update. please follow the instructions on the reference site to update to the latest version of the vulnerability patch.

CVE-2026-2673

OpenSSL version: 3.6.2
OpenSSL version: 3.5.6

references

[1] OpenSSL Security Advisory [13th March 2026]
https://openssl-library.org/news/secadv/20260313.txt