Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure2 |
| 2026-04-14 | 1 | Disclosure1 |
CVE-2026-5504 Padding Oracle Vulnerability in wolfSSL PKCS7 CBC Decryption https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5504
Post summary
The text announces CVE‑2026‑5504 as a padding oracle vulnerability in wolfSSL PKCS7 CBC decryption, but does not provide Proof‑of‑Concept details, exploit code, active exploitation evidence, or patch information.
🚨*CVE* CVE-2026-5504 A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext… https://www.cve.org/CVERecord?id=CVE-2026-5504 ----- Traducción: CVE-2026-5504 Exi… http://infoflow.cloud`
Post summary
The text announces a padding oracle vulnerability (CVE-2026-5504) in wolfSSL's PKCS7 CBC decryption, providing technical details but no PoC, exploit code, or patch information.
CVE-2026-5504 A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext… https://www.cve.org/CVERecord?id=CVE-2026-5504
Post summary
The post is a concise disclosure of a padding oracle vulnerability in wolfSSL's PKCS7 CBC decryption.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |