SECUFOCUSNOW
VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

19,287 guide candidatesPage 1078 of 1608
Review reviewHighFixed-version data
CVE-2026-31790

OpenSSL OpenSSL, SIMATIC CN 4100, openssl

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, < V5.0
Fixed
3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewCriticalFixed-version data
CVE-2026-31789

OpenSSL OpenSSL, SIMATIC CN 4100, openssl

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, < V5.0
Fixed
3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewHighFixed-version data
CVE-2026-28390

OpenSSL OpenSSL, SIMATIC CN 4100, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, >= 1.1.1 < 1.1.1zg, >= 1.0.2 < 1.0.2zp, < V5.0
Fixed
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewHighFixed-version data
CVE-2026-28389

OpenSSL OpenSSL, SIMATIC CN 4100, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, >= 1.1.1 < 1.1.1zg, >= 1.0.2 < 1.0.2zp, < V5.0
Fixed
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewHighFixed-version data
CVE-2026-28388

OpenSSL OpenSSL, SIMATIC CN 4100, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, >= 1.1.1 < 1.1.1zg, >= 1.0.2 < 1.0.2zp, < V5.0
Fixed
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewHighFixed-version data
CVE-2026-28387

OpenSSL OpenSSL, SIMATIC CN 4100, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Affected
>= 3.6.0 < 3.6.2, >= 3.5.0 < 3.5.6, >= 3.4.0 < 3.4.5, >= 3.3.0 < 3.3.7, >= 3.0.0 < 3.0.20, >= 1.1.1 < 1.1.1zg, < V5.0
Fixed
1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2
Review reviewHighFixed-version data
CVE-2026-28386

OpenSSL OpenSSL, openssl

Affected
>= 3.6.0 < 3.6.2
Fixed
3.6.2
Review reviewCriticalFixed-version data
CVE-2026-39397

delmaredigital payload-puck

Affected
< 0.6.23
Fixed
0.6.23
Review reviewHighResearch in progress
CVE-2026-35533

jdx mise

Affected
>= >= 2026.2.18, >= 2026.2.18 <= 2026.4.5
Fixed
No verified fixed-version field is available yet
Review reviewCriticalFixed-version data
CVE-2026-34045

podman-desktop podman-desktop, Red Hat Enterprise Linux 10, Red Hat Build of Podman Desktop

Affected
< 1.26.2
Fixed
1.26.2
Priority reviewCriticalFixed-version data
CVE-2026-33439

OpenIdentityPlatform OpenAM, openam

Affected
< 16.0.6
Fixed
16.0.6
Review reviewHighFixed-version data
CVE-2026-29181

open-telemetry opentelemetry-go, multicluster engine for Kubernetes 2.11.0, multicluster engine for Kubernetes 2.8

Affected
>= >= 1.36.0, >= 1.36.0 < 1.41.0
Fixed
1.41.0