CVE-2026-16458
Received Received - Intake

Padding Oracle Attack in ocrypto Library

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Switzerland Government Common Vulnerability Program

Description
Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-16458
EUVD
EUVD-2026-57758

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oberon_microsystem_ag ocrypto From 3.0.0 (inc) to 4.0.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.
CWE-208 Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a timing side-channel vulnerability in the RSA PKCS#1 v1.5 decryption of Oberon microsystem AG's ocrypto library. It allows attackers to recover plaintext by measuring timing differences during decryption operations, distinguishing between outcomes like successful decryption or invalid padding.

Detection Guidance

Detecting this vulnerability requires checking the version of the ocrypto library in use. Commands like 'find / -name "ocrypto*" 2>/dev/null' or 'ldd <your_application> | grep ocrypto' can help locate the library. Verify if the version is between 3.0.0 and 4.0.0.

Impact Analysis

If exploited, this vulnerability could allow an attacker to decrypt sensitive data protected by the affected ocrypto library, potentially exposing confidential information such as passwords, messages, or other encrypted content.

Mitigation Strategies

Immediately update the ocrypto library to version 4.0.1 or newer. Additionally, implement application-specific constant-time validation for decrypted messages to ensure integrity, as the library update alone may not fully mitigate the issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16458. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart