CVE ID :CVE-2026-16001 Published : 2. Oktober 2026 06:55 | 24 Minuten ago Description :Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed without a block cipher) in Legion of the Bouncy Castle Inc. bc-csharp...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-16001 - IesEngine stream-mode MAC forgery via length-dependent KDF split

VERWANDTEARTIKEL

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

CVE-2026-63569 - MTI/A0 DHAgreement does not validate the peer's ephemeral value

CVE-2026-63568 - Unbounded CMP/CRMF password-based MAC iteration count allows CPU exhaustion

CVE-2026-63567 - IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)

CVE-2026-63566 - DTLS handshake reassembler allocates buffer from unchecked 24-bit length

CVE-2026-16000 - KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used