Tools AI-Found Vulnerability Register aifv-0042
Register entry
OpenSSL invalid or NULL pointer dereference in PKCS#12 ASN1_TYPE validation, credited to Aisle Research
- CVE
- CVE-2026-22795
- Project
- OpenSSL
- Component
- PKCS#12 ASN1_TYPE validation
- Finder
- AISLE
- Autonomy
- autonomous system per the company; OpenSSL credits named Aisle Research staff
- Evidence tier
- Claim outside the record
- Assigner
- openssl
- Severity
- Low (OpenSSL severity policy)
- Bounty
- None published
- Confidence
- CONFIRMED
What happened
One of four OpenSSL records of 27 January 2026 whose credits name people at Aisle Research; the claim that an autonomous system found them is the company's. AISLE says it holds all twelve CVEs in that coordinated release, a figure this desk has not confirmed at the record.
Credit as recorded: reporter: Luigino Camastra (Aisle Research); remediation developer: Bob Beck. Date basis: datePublished.
Sources
- CVE record, cvelistV5 mirrorraw.githubusercontent.com/CVEProject/cvelistV5/main/cves/202…
- OpenSSL security advisory, 27 January 2026openssl-library.org/news/secadv/20260127.txt
One record from the AI-Found Vulnerability Register, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 19 September 2026