Fedora 43 : php-phpseclib3 (2026-67f1cac6df)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-67f1cac6df advisory. Update to v3.0.56 - contains fixes for CVE-2026-40194 and CVE-2026-44167 Tenable has extracted the preceding description block directly from the...

Fedora 44 : php-phpseclib3 (2026-d2d58edf7d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d2d58edf7d advisory. Update to v3.0.56 - contains fixes for CVE-2026-40194 and CVE-2026-44167 Tenable has extracted the preceding description block directly from the...

Fedora 44 : php-phpseclib (2026-fac5581caa)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fac5581caa advisory. Update to v2.0.55 - contains fix for CVE-2026-44167 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 43 : php-phpseclib (2026-b2ce3f8e3e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b2ce3f8e3e advisory. Update to v2.0.55 - contains fix for CVE-2026-44167 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora 44 : nextcloud (2026-30881a5be7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30881a5be7 advisory. 33.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

CVE-2026-44167 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-44167

A flaw was found in phpseclib, a PHP secure communications library. This vulnerability allows a remote attacker to trigger a denial of service by providing specially crafted, untrusted ASN.1 Abstract Syntax Notation One files, such as X.509 certificates or RSA private/public keys. This issue is a...

CVE-2026-44167

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files eg. X509 certificates, RSA PKCS8 private or public keys, etc. This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52...