EUVD-2026-74298

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW does not validate the length of the attacker-supplied encryptedkey JWE...

CVE-2026-53938

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms "alg" = "A128KW", "A192KW", "A256KW" does not validate the length of the attacker-supplied "encryptedke...

CVE-2026-53938 OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW does not validate the length of the attacker-supplied encryptedkey JWE...

CVE-2026-53938 OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW does not validate the length of the attacker-supplied encryptedkey JWE...

CVE-2026-53938

OpenIDC/cjose , a C library implementing JOSE, is affected by a heap buffer overflow in its JWE decryption path for the AES Key Wrap algorithms (A128KW, A192KW, A256KW) prior to version 0.6.2.5 . The root cause is a missing length validation of the attacker-supplied encrypted_key before unwrappin...

CVE-2026-53938 OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW does not validate the length of the attacker-supplied encryptedkey JWE...

K000163232: libssh vulnerability CVE-2026-59847

Security Advisory Description A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. CVE-2026-59847 Impact There is no impact...

PT-2026-88524

Name of the Vulnerable Software and Affected Versions OpenIDC/cjose versions 0.6.1 through 0.6.2.5 Description When encrypting a JSON Web Encryption JWE using AES-CBC-HMAC content-encryption algorithms A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 combined with any key-management algorithm that...

Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability, but only systems with specific IPsec configurations are vulnerable. The specific flaw exists within the IKEEXT service...

PT-2026-88523

Name of the Vulnerable Software and Affected Versions OpenIDC/cjose versions prior to 0.6.2.5 Description The JWE decryption path for AES Key Wrap key-management algorithms alg = A128KW, A192KW, A256KW fails to validate the length of the encrypted key before unwrapping it into a fixed-size,...

cjose -- Use of Hard-coded Cryptographic Key

https://github.com/OpenIDC/cjose/security/advisories/GHSA-f6wf-pqg3-6wqq reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm...

cjose -- Heap-based Buffer Overflow

https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW,...

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no confirmed reports of exploitation i...

Aegis v3.4.3

Aegis Authenticator Aegis Authenticator is a free, secure and open source 2FA app for Android. It aims to provide a secure authenticator for your online services, while also including some features missing in existing authenticator apps, like proper encryption and backups. Aegis supports HOTP and...

Use Of A Broken Or Risky Cryptographic Algorithm

Spring Security is vulnerable to Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to AesBytesEncryptor using AES/CBC with a null all-zero initialization vector, which allows an attacker to exploit predictable encryption and potentially infer relationships between encrypt...

Exploit for CVE-2026-57062

gpgsm CVE-2026-57062: CMS AES-GCM short tag USN-8720-1 GnuP...

SUSE CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80831

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...

CVE-2026-80831

CVE-2026-80831 affects the Linux kernel 's mxs-dcp crypto driver. In the function mxs_dcp_aes_block_crypt(), the source scatterlist is read via sg_dma_len() without first calling dma_map_sg(), leaving the DMA length field invalid. When CONFIG_NEED_SG_DMA_LENGTH=y is set, this can cause sg_dma_len...

CVE-2026-80831 crypto: mxs-dcp - fix source scatterlist length access

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxsdcpaesblockcrypt uses sgdmalen without mapping the source scatterlist with dmamapsg first. Therefore, sgdmalen is invalid and could return zero or a stale DMA length,...