OpenSSL CMS EnvelopedData NULL dereference (CVE-2026-28390)

Summary

A crafted CMS message using RSA-OAEP may crash an application.

Vulnerability ID	Vulnerability Overview
CVE-2026-28390	During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence, crashing the application.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06

TS5020 / TS3030
Fixed in firmware version 3.16

 

Back to Security Notices

Date	Description
09/02/2026	Initial release
10/14/2026	Update

Back to Security Notices