The vulnerabilities of the functions pkcs7_decrypt_smime(), pkcs7_decrypt_pem(), and pkcs7_decrypt_der in the Python programming language-based cryptography library allow attackers to compromise the confidentiality of protected information.

🗓️ 05 Aug 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 22 Views

Vulnerabilities in three pkcs7 decrypt functions expose confidentiality via error reporting flaws.

Reporter	Title	Published	Views	Family All 296
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Aug 202609:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 Bridge is vulnerable due to baseline-browser-mapping, sqlparse, cryptography, Browserslist (CVE-2026-45819,CVE-2026-84305,CVE-2026-69247,CVE-2026-73088,CVE-2026-73089,CVE-2026-54284,CVE-2026-59893,CVE-2026-59894,CVE-2026-71491)	9 Sep 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	7 Aug 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerabilities exists in NPS of IBM Netezza Appliance	9 Sep 202609:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-69247, CVE-2026-69248, CVE-2026-69249)	2 Sep 202610:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography which is vulnerable to multiple CVEs.	27 Aug 202619:30	–	ibm
IBM Security Bulletins	Security Bulletin: Investigation Assistant App for IBM QRadar SIEM contains components with known vulnerabilities	27 Aug 202615:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cryptography	15 Sep 202620:45	–	ibm
ATTACKERKB	CVE-2026-69247	3 Aug 202621:16	–	attackerkb

Vulners

Node

python_cryptographic_authority cryptographyRange44.0.0–50.0.0

Source	Link
dailycve	www.dailycve.com/pyca-cryptography-bleichenbacher-oracle-cve-2026-69247-high-dc-aug2026-1295/
github	www.github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5
github	www.github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f
github	www.github.com/pyca/cryptography/pull/15369
github	www.github.com/pyca/cryptography/tags
web	www.web.nvd.nist.gov/view/vuln/detail

05 Aug 2026 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25.4

CVSS 35.9

EPSS0.00175

pkcs7 decrypt error reporting confidentiality risk cryptography library