CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticate_decrypt_into and Chacha20.authenticate_decrypt_into functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false, but the destination buffer already holds the full plaintext.

• CWE-347

• https://osv.dev/vulnerability/OSEC-2026-12
• https://osv.dev/vulnerability/OSEC-2026-12

Published

Sep 9, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8769A vulnerability was determined in vercel ai up to 3.0.97. Th…6.5
• CVE-2026-8770A vulnerability was identified in continuedev continue up to…3.3
• CVE-2026-8771A security flaw has been discovered in linlinjava litemall u…7.3
• CVE-2026-8772A weakness has been identified in linlinjava litemall up to …4.7
• CVE-2026-87724Tor before 0.4.9.12 interprets the CC_RESPONSE extension eve…6.5
• CVE-2026-8773A security vulnerability has been detected in linlinjava lit…4.7
• CVE-2026-87733An issue was discovered in the mirage-crypto-ec function bef…6.2
• CVE-2026-87734An issue was discovered in the utcp package before 0.0.6 for…7.5
• CVE-2026-87735An issue was discovered in the mirage-crypto-pk package befo…4.3
• CVE-2026-87736An issue was discovered in the mirage-crypto-ec package befo…4.3
• CVE-2026-87737An issue was discovered in the mirage-crypto-ec package befo…5.9
• CVE-2026-8774A vulnerability was detected in Edimax BR-6228NC 1.22. Affec…6.3