CVE-2023-26556

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statement in a loop). One leak is in ecdsa/keygen/round_2.go. (bnb-chain/tss-lib and thorchain/tss are also affected.)

• CWE-203
• CWE-203

• https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0Release Notes
• https://github.com/bnb-chain/tss-lib/tree/v1.3.5Product
• https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3Release Notes
• https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b
• https://github.com/IoFinnet/tss-lib/releases/tag/v2.0.0Release Notes
• https://github.com/bnb-chain/tss-lib/tree/v1.3.5Product
• https://gitlab.com/thorchain/tss/tss-lib/-/tags/v0.1.3Release Notes
• https://medium.com/%40iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b

Published

Apr 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26550A SQL injection vulnerability in BMC Control-M before 9.0.20…9.8
• CVE-2023-26551mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26552mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26553mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26554mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bo…5.6
• CVE-2023-26555praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 ha…6.4
• CVE-2023-26557io.finnet tss-lib before 2.0.0 can leak the lambda value of …7.5
• CVE-2023-26559A directory traversal vulnerability in Oxygen XML Web Author…5.3
• CVE-2023-2656A vulnerability classified as critical has been found in Sou…9.8
• CVE-2023-26560Northern.tech CFEngine Enterprise before 3.21.1 allows a sub…6.5
• CVE-2023-26562In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed accou…6.5
• CVE-2023-26563The Syncfusion EJ2 Node File Provider 0102271 is vulnerable …9.8