dhx vulnerability

The dhx vulnerability tag covers OpenSSL security research and guidance about CVE-2026-42770, a low-severity flaw affecting a specialized finite-field Diffie-Hellman exchange path. The issue involves DHX public-key validation using a subgroup parameter supplied by an untrusted peer instead of the parameter associated with the local private key. Under the right conditions, an attacker acting as the cryptographic peer or positioned in the exchange path may recover portions of a victim’s private Diffie-Hellman exponent through repeated exchanges. This archive is relevant to Windows administrators and developers who need to assess affected OpenSSL deployments and apply the recommended update.