PatchTheCVEcrypt\ vulnerabilities and fixes
Recent CVEs affecting crypt\, with upgrade or downgrade steps. 2 tracked.
crypt\ has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-07-13. Highest priority: CVE-2026-58102 (score 48/100).
- CVE-2026-58102 CRITICAL 9.1 UPGRADE Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate ext
- CVE-2026-58101 HIGH 7.5 UPGRADE Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X50
FAQ
How do I fix crypt\ vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crypt\ being exploited right now?
None of the tracked crypt\ CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crypt\ CVE should I patch first?
CVE-2026-58102 currently ranks highest (48/100): Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate ext.