Browse all 5 CVE security advisories affecting phpseclib. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-84308 | phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery — phpseclib CWE-208 | 6.3 | Medium | 2026-09-01 |
| CVE-2026-55599 | phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access — phpseclib CWE-918 | 5.8 | Medium | 2026-06-22 |
| CVE-2026-44167 | phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() — phpseclib CWE-400 | 7.5 | High | 2026-05-12 |
| CVE-2026-40194 | phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals() — phpseclib CWE-208 | 3.7 | Low | 2026-04-10 |
| CVE-2026-32935 | phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack — phpseclib CWE-208 | 5.9 | - | 2026-03-20 |
This page lists every published CVE security advisory associated with phpseclib. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.