https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:41:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-04641 bdu:2026-04641 https://cve.radiocsirt.org/vuln/bdu:2026-04641 https://cve.radiocsirt.org/vuln/euvd-2026-309175 EUVD-2026-309175 https://cve.radiocsirt.org/vuln/euvd-2026-309175 https://cve.radiocsirt.org/vuln/fkie_cve-2026-32935 <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-32935 https://cve.radiocsirt.org/vuln/ghsa-94g3-g5v7-q4jg <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack.</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788</p> <p>### Workarounds Use AES in CTR, CFB or OFB modes</p> <p>### References https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788</p> <p><strong>Affected:</strong> Packagist: phpseclib/phpseclib</p> <p>### Impact Those using AES in CBC mode may be susceptible to a padding oracle timing attack.</p> <p>### Patches https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788</p> <p>### Workarounds Use AES in CTR, CFB or OFB modes</p> <p>### References https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788</p> https://cve.radiocsirt.org/vuln/ghsa-94g3-g5v7-q4jg https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32935 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:24.04:LTS: php-phpseclib3, Ubuntu:Pro:24.04:LTS: php-phpseclib, Ubuntu:Pro:24.04:LTS: phpseclib and 6 more</p> <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: php-phpseclib, Ubuntu:Pro:18.04:LTS: phpseclib, Ubuntu:Pro:20.04:LTS: php-phpseclib, Ubuntu:Pro:20.04:LTS: phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib, Ubuntu:Pro:22.04:LTS: php-phpseclib3, Ubuntu:24.04:LTS: php-phpseclib3, Ubuntu:Pro:24.04:LTS: php-phpseclib, Ubuntu:Pro:24.04:LTS: phpseclib and 6 more</p> <p>phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-32935 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1931 <p>Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Cacti ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1931