OpenSSL Delta CRL DoS (CVE-2026-28388)

Summary

A malformed delta CRL may crash certificate verification.

Vulnerability ID	Vulnerability Overview
CVE-2026-28388	When processing a malformed delta Certificate Revocation List (CRL) that lacks a required CRL Number extension, a NULL pointer dereference occurs. This crashes applications that have delta CRL processing enabled.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06

TS5020 / TS3030
Fixed in firmware version 3.16
 

Back to Security Notices

Date	Description
09/02/2026	Initial release
10/14/2026	Update

Back to Security Notices