JLSEC-2026-124

🗓️ 17 Apr 2026 13:07:52Reported by GoogleType

osv🔗 osv.dev👁 1 Views

ElGamal in Libgcrypt before 1.9.4 permits plaintext recovery via cross-configuration attack on OpenPGP.

Reporter	Title	Published	Views	Family All 101
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	25 Aug 202202:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Golang Go, libxml2, curl, expat, libgcrypt and IBM WebSphere Application Server Liberty	9 Aug 202205:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202502:21	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.	15 Dec 202209:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component	20 Dec 202220:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container may be vulnerable to security restriction bypass due to CVE-2021-40528	4 Nov 202218:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	27 Feb 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a cross-configuration attack against OpenPGP (CVE-2021-40528)	12 Jan 202321:59	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0129: libgcrypt (ALINUX3-SA-2022:0129)	14 May 202500:00	–	nessus

Source	Link
eprint	www.eprint.iacr.org/2021/923
git	www.git.gnupg.org/cgi-bin/gitweb.cgi
ibm	www.ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1
ibm	www.ibm.github.io/system-security-research-updates/2021/09/06/insecurity-elgamal-pt2
security	www.security.gentoo.org/glsa/202210-13
eprint	www.eprint.iacr.org/2021/923
git	www.git.gnupg.org/cgi-bin/gitweb.cgi
ibm	www.ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1
ibm	www.ibm.github.io/system-security-research-updates/2021/09/06/insecurity-elgamal-pt2
security	www.security.gentoo.org/glsa/202210-13

17 Apr 2026 13:16Current

7.2High risk

Vulners AI Score7.2

CVSS 22.6

CVSS 3.15.9

EPSS0.00097

SSVC