CVE-2026-6291

Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypting PKCS#7 EnvelopedData using RSA PKCS#1 v1.5 key transport, wolfSSL returned distinguishable error codes depending on whether RSA padding validation failed versus whether the decrypted content was malformed. An attacker able to submit crafted EnvelopedData messages and observe error responses could use this as a padding oracle to incrementally recover the encrypted Content Encryption Key (CEK). The fix generates a deterministic pseudo-random fake CEK on padding failure (via HMAC-SHA256) and proceeds with decryption identically, using constant-time operations throughout, so that all failure paths produce the same error regardless of padding validity.

• CWE-208

• https://github.com/wolfSSL/wolfssl/pull/10203Issue Tracking
• https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jun 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-6290Velociraptor versions prior to 0.76.3 contain a vulnerabilit…9.1
• CVE-2026-62900Improper removal of sensitive information before storage or …5.9
• CVE-2026-62901Unchecked input for loop condition in .NET allows an unautho…7.5
• CVE-2026-62902Inclusion of functionality from untrusted control sphere in …6.5
• CVE-2026-62908Concurrent execution using shared resource with improper syn…7
• CVE-2026-62909Uncaught exception in .NET allows an authorized attacker to …7.8
• CVE-2026-62910Improper control of resource identifiers ('resource injectio…7.2
• CVE-2026-62911Authentication bypass by capture-replay in Microsoft Exchang…8
• CVE-2026-62912Deserialization of untrusted data in Microsoft Exchange Serv…6.5
• CVE-2026-62913Heap-based buffer overflow in Microsoft Exchange Server allo…8.8
• CVE-2026-62914Improper neutralization of input during web page generation …7.3
• CVE-2026-62915Missing authorization in Microsoft Exchange Server allows an…6.5