Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Observable Timing Discrepancy in cryptography (CVE-2026-69247)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Observable Timing Discrepancy in cryptography due to issues in decryption. Cryptography is used in our Speech runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details...

CVE-2026-69247

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...

CVE-2026-69247: Observable Timing Discrepancy

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7decryptder, pkcs7decryptpem, and pkcs7decryptsmime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which...