crypto vulnerabilities and fixes
Recent CVEs affecting crypto, with upgrade or downgrade steps. 2 tracked.
crypto has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-09-02. Highest priority: CVE-2026-56855 (score 42/100).
- CVE-2026-56855 HIGH 7.5 UPGRADE Previously, after a channel has been established, a malicious peer could send crafted messages that would dead
- CVE-2026-78662 HIGH 7.5 UPGRADE Previously, a channel registered in the mux's chanList is not usable until it is established
FAQ
How do I fix crypto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crypto being exploited right now?
None of the tracked crypto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crypto CVE should I patch first?
CVE-2026-56855 currently ranks highest (42/100): Previously, after a channel has been established, a malicious peer could send crafted messages that would dead.