Fedora 43 : php-phpseclib3 (2026-67f1cac6df)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-67f1cac6df advisory. Update to v3.0.56 - contains fixes for CVE-2026-40194 and CVE-2026-44167 Tenable has extracted the preceding description block directly from the...

Fedora 44 : php-phpseclib3 (2026-d2d58edf7d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d2d58edf7d advisory. Update to v3.0.56 - contains fixes for CVE-2026-40194 and CVE-2026-44167 Tenable has extracted the preceding description block directly from the...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-40194

phpseclib is a PHP secure communications library. Starting in 0.1.1 and prior to 3.0.51, 2.0.53, and 1.0.28, phpseclib\Net\SSH2::getbinarypacket uses PHP's != operator to compare a received SSH packet HMAC against the locally computed HMAC. != on equal-length binary strings in PHP uses memcmp,...