Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

phpseclib — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in phpseclib, with AI-generated Chinese analysis, references, and POCs.

Vendor: phpseclib

CVE ID Title CVSS Severity Published
CVE-2026-84308 phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery CWE-208 6.3 Medium 2026-09-01
CVE-2026-55599 phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access CWE-918 5.8 Medium 2026-06-22
CVE-2026-44167 phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() CWE-400 7.5 High 2026-05-12
CVE-2026-40194 phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals() CWE-208 3.7 Low 2026-04-10
CVE-2026-32935 phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack CWE-208 5.9 - 2026-03-20

All 5 known CVE vulnerabilities affecting phpseclib with full Chinese analysis, references, and POCs where available.