CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

Linux Distros Unpatched Vulnerability : CVE-2026-65626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a...

DEBIAN-CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

UBUNTU-CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

EUVD-2026-110304

The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00 separator...

EEF-CVE-2026-65626 Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

Summary The pure-Erlang RSAES-PKCS1-v15 decryption in the josejwapkcs1 module is a Bleichenbacher padding oracle. emepkcs1decode/2 returns the recovered message when a decrypted block has valid PKCS1 v1.5 padding a leading 0x00 0x02, a padding string of at least eight non-zero bytes, and a 0x00...

CVE-2026-65626

The jose library (versions 1.3.0 before 1.11.13 ) contains a Bleichenbacher padding oracle in its pure-Erlang jose_jwa_pkcs1 module. The vulnerability arises because the eme_pkcs1_decode/2 and rsaes_pkcs1_decrypt/2 functions fail to implement implicit-rejection countermeasures (RFC 8017 §7.2.2), ...

PT-2026-125111

Name of the Vulnerable Software and Affected Versions jose versions 1.3.0 through 1.11.12 Description The jose jwa pkcs1 module contains a Bleichenbacher padding oracle in its pure-Erlang RSAES-PKCS1-v1 5 decryption. The function eme pkcs1 decode/2 returns the recovered message for valid PKCS1 v1...

librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS8.5:CLSA-2025:1742723010)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1742723010 advisory. - The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS8.4:CLSA-2025:1742661821)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1742661821 advisory. - The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin...

librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload

A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...

Astra Linux – Vulnerability in PHP 8.1, PHP 7.3

The opensslprivatedecrypt function in PHP, when using PKCS1 padding OPENSSLPKCS1PADDING, which is the default, is vulnerable to the Marvin Attack unless it is used with an OpenSSL version that includes the changes from this pull request: https://github.com/openssl/openssl/pull/13817...

CVE-2026-89086

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses cryptography which is vulnerable to CVE-2026-69247, CVE-2026-69248, CVE-2026-69249. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package...