NuGet Package 'Amazon.Extensions.S3.Encryption' 2.1.x <= 2.3.0 / 3.x < 3.2.2 / 4.0.x < 4.0.3 RSA Padding Oracle

The version of the NuGet Package 'Amazon.Extensions.S3.Encryption' Amazon S3 Encryption Client for .NET installed on the remote host is 2.x greater than or equal to 2.1.0, or 3.x prior to 3.2.2, or 4.0.x prior to 4.0.3. It is, therefore, affected by a padding oracle vulnerability. A remote user w...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

Linux Distros Unpatched Vulnerability : CVE-2026-65626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a...

DEBIAN-CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

AZL-112196 CVE-2026-65626 affecting package rabbitmq-server for versions less than 3.13.7-10

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

UBUNTU-CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The jose library (versions 1.3.0 before 1.11.13 ) contains a Bleichenbacher padding oracle in its pure-Erlang jose_jwa_pkcs1 module. The vulnerability arises because the eme_pkcs1_decode/2 and rsaes_pkcs1_decrypt/2 functions fail to implement implicit-rejection countermeasures (RFC 8017 §7.2.2), ...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

EUVD-2026-110304

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

EEF-CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

Summary The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00...

Andrew Bennett JOSE side-channel information disclosure vulnerability

Versions of JOSE prior to 1.3.0 and 1.11.13 contain a side-channel information disclosure vulnerability. This vulnerability stems from the RSAES-PKCS1-v15 decryption in the JOSEjwapkcs1 module, which utilizes a Bleichenbacher padding oracle without employing an implicit rejection mechanism...

PT-2026-125111

Name of the Vulnerable Software and Affected Versions jose versions 1.3.0 through 1.11.12 Description The jose jwa pkcs1 module contains a Bleichenbacher padding oracle in its pure-Erlang RSAES-PKCS1-v1 5 decryption. The function eme pkcs1 decode/2 returns the recovered message for valid PKCS1 v1...

CVE-2026-110310

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS1 v1.5 padding...

CVE-2026-110310

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS1 v1.5. Since this padding scheme is susceptible to the well-known Bleichenbacher attack, the user can use a PKCS1 v1.5 padding...

CVE-2026-110310

The Amazon S3 Encryption Client for .NET is vulnerable to an RSA PKCS#1 v1.5 padding oracle attack. A remote user capable of reading encrypted objects in an S3 bucket can force a padding downgrade by modifying an object's metadata to use the legacy PKCS#1 v1.5 scheme. This vulnerability allows th...