Beveiligingsadvies

CVE-2026-5504

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-09 22:33:42

Laatst bijgewerkt 2026-04-14 14:34:40

Toegewezen door wolfSSL

CVSS-score 6.3

Status PUBLISHED

Beschrijving

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

← Alle CVE's bekijken Bekijk op cve.org ↗