Security Advisory

CVE-2026-5504

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-09 22:33:42

Last updated 2026-04-14 14:34:40

Assigner wolfSSL

CVSS score 6.3

State PUBLISHED

Description

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

← Browse all CVEs View on cve.org ↗