CVE ID :CVE-2026-63567 Published : 2. Oktober 2026 06:58 | 21 Minuten ago Description :Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified...

#Sicherheitslücke #APT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-63567 - IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)

VERWANDTEARTIKEL

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

CVE-2026-63569 - MTI/A0 DHAgreement does not validate the peer's ephemeral value

CVE-2026-63568 - Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion

CVE-2026-63566 - DTLS handshake reassembler allocates buffer from unchecked 24-bit length

CVE-2026-16001 - IesEngine stream-mode MAC forgery via length-dependent KDF split

CVE-2026-16000 - KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used