Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-10 | 1 | Disclosure1 |
| 2026-04-14 | 1 | General1 |
CVE-2026-5392 Heap Out-of-Bounds Read in PKCS7 Parsing via Crafted Messages https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5392
Post summary
The text presents a new vulnerability (CVE‑2026‑5392) describing a heap OOB read in PKCS7 parsing, but lacks details on PoC, exploitation, patches, or active usage.
⚡ New CVE Alert: CVE-2026-5392 📊 Severity: 2.3 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5392 #CVE-2026-5392 #CVE #Low #CyberSecurity #InfoSec https://t.co/NX9ANhppQa
Post summary
The tweet announces the new CVE-2026-5392 with a low severity rating, providing only a link to the NVD entry and no further technical, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |