Dashboard / CVE-2026-16458

CVE-2026-16458

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 37/100
Published: 2026-08-13 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: None
S: X
AT: Present
VC: High
VI: None
VA: None

Description

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

Weakness Classification (2)

References & Advisories (1)

Bug Bounty Relevance

37 / 100
✓ No authentication
✓ No user interaction

CVSS Score

5.9 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.09%
Raw Score 0.000910
Percentile 0.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00091
2026-10-28
0.00091

Intelligence Sources

nvd ref →

External Links