OpenSSL Code Injection Vulnerability in ImportPKCS12 Function of Affected Product

CVE-2026-60038

What is CVE-2026-60038?

A high privileged remote attacker can exploit a vulnerability within the ImportPKCS12 function tied to OpenSSL. By leveraging this flaw, an attacker can execute arbitrary code on the server, potentially leading to catastrophic security breaches. This may result in complete confidentiality, integrity, and availability loss for the affected system, making it crucial for organizations to address this issue promptly.

References