CVE-2026-28490Disclosure(authlib / authlib)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the implementation of the JSON Web Encryption (JWE) RSA1_5 key management algorithm. Authlib registers RSA1_5 in its default algorithm registry without requiring explicit opt-in, and actively destroys the constant-time Bleichenbacher mitigation that the underlying cryptography library implements correctly. This issue has been patched in version 1.6.9.

authlib CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/authlib/authlib/commit/48b345f29f6c459f11c6a40162b6c0b742ef2e22

Exploit / PoC references

https://github.com/authlib/authlib/security/advisories/GHSA-7432-952r-cw78

Other references

https://github.com/authlib/authlib/releases/tag/v1.6.9

Weakness type (CWE)

CWE-203CWE-327

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

authlib

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-03-16); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

authlib

Products

authlib

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-16	2	Disclosure2
2026-03-17	1	Disclosure1

Full discourse3 posts

CVE@CVEnew205d
Disclosure
CVE-2026-28490 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the … https://www.cve.org/CVERecord?id=CVE-2026-28490
Post summary
The entry identifies CVE-2026-28490 as a padding oracle issue in Authlib prior to version 1.6.9, but provides no PoC, exploit, patch information, or reports of active exploitation.
00000120
56.7K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash205d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28490 - Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle Intel Report: https://ift.tt/PBGHNyk
Post summary
The tweet announces the discovery of a new Authlib vulnerability (CVE-2026-28490) involving a JWE RSA1_5 Bleichenbacher padding oracle, but provides no details on exploitation, patches, or broader impact.
0000061
335 followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash205d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28490 - Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle Intel Report: https://ift.tt/rNcp4gw
Post summary
The alert announces CVE‑2026‑28490, a Bleichenbacher padding oracle vulnerability in Authlib, and provides a link to an Intel report.
0000050
335 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	authlib	authlib	-	-	-

Explore more

Back to dashboard authlib CVEs authlib vulnerabilities