OpenSSL Patches Nine Vulnerabilities Enabling Remote Denial-of-Service Attacks

OpenSSL has released security updates to address nine vulnerabilities across its QUIC, CMS, Certificate Management Protocol (CMP) , DTLS, TLS Raw Public Key (RPK), and AEAD code paths. The 25 August 2026 advisory contains three Moderate-severity and six Low-severity flaws, several of which allow a remote attacker or malicious peer to crash affected applications or exhaust their memory. The most serious issue, CVE-2026-18798, is a double-free vulnerability in the QUIC server…