CVE WATCH / VULNERABILITY DETAIL
CVE-2026-60038
HIGHCVSS 7.2NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-124937
- CVE-2026-124911
- CVE-2026-125745 MEDIUM 4.3
- CVE-2026-12573 HIGH 8.8
- CVE-2026-12572 HIGH 7.2
- CVE-2026-125715 MEDIUM 5.3
- CVE-2026-125712 HIGH 7.5
- CVE-2026-125706 MEDIUM 5.5
- CVE-2026-120326
- CVE-2026-95646 HIGH 8