CVE-2026-5419General

LOWCVSS 3.7 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. This vulnerability is a form of information disclosure.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-208

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-10); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-10: 1Mentions · 2026-06-11: 106-1006-11
Signal classification1 categories
General
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Stuart 🇨🇷@stooee_
    General

    After analyzing 40% of vulnerabilities from past week, CVE-2026-5419 has 6 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert

    Post summary

    The post notes that CVE‑2026‑5419 has attracted attention with six articles and points to an external website for more information, but offers no technical, exploit, or patch details.

    0000053
    72 followersView on X
  • Stuart 🇨🇷@stooee_
    General

    After analyzing 30% of vulnerabilities from past week, CVE-2026-5419 has 6 articles published from different internet sources, no other cve has these many articles. More information here: https://cves.st00ee.com/ #vulnerability #CyberSecurity #ThreatIntel #CVE #SecurityAlert

    Post summary

    The notice simply points out that CVE‑2026‑5419 has multiple online articles and provides a generic link for further reading, without any technical details, exploit code, or patch information.

    0000046
    72 followersView on X

Explore more