Critical Security Update for compat-openssl10: CVE-2026-84782
Summary
RHSA-2026:80510: Red Hat Security Advisory: compat-openssl10 security update. Affects compat-openssl10 versions < 1:1.0.2o-4.el8_10.4. Fixed in 1:1.0.2o-4.el8_10.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
compat-openssl10 is a compatibility package that provides OpenSSL 1.0.2 libraries for applications that require older versions of OpenSSL. It is widely used in enterprise environments to ensure compatibility with legacy systems and applications. However, vulnerabilities in this package can expose systems to security risks, making it crucial to maintain updated versions.
Vulnerability Detail
The vulnerability identified as CVE-2026-84782 affects the compat-openssl10 package, which is used to support legacy applications relying on older OpenSSL versions. This vulnerability can lead to potential data exposure, as it allows attackers to exploit weaknesses in the cryptographic implementations. The severity of this vulnerability is rated with a CVSS score of 7.4, indicating a high risk of impact on confidentiality and availability.
How To Fix
Minimum fixed version
1:1.0.2o-4.el8_10.4
This is the first release that contains the fix.
sudo dnf update compat-openssl10Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider limiting access to the affected applications or services until the update can be applied. Additionally, monitor network traffic for any suspicious activity related to the use of the compat-openssl10 package.
Conclusion
The compat-openssl10 package has a critical vulnerability (CVE-2026-84782) that requires immediate attention. Updating to the latest patched version is essential to mitigate potential security risks. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for compat-openssl10 →
FAQ
CVE-2026-84782 is a security vulnerability affecting the compat-openssl10 package, which can lead to data exposure and other security risks.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 7.4, indicating a high severity level.
If you cannot update the package immediately, limit access to the affected applications and monitor for any suspicious activity.
More information can be found in the Red Hat Security Advisory and on the official CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for compat-openssl10.
