CVE-2026-16458mediumCWE-208CWE-327

CVE-2026-16458: medium-severity vulnerability in Oberon microsystems AG ocrypto

Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto

Published

Follow this CVE+ Monitor ocrypto

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.1%
Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Oberon microsystems AG · ocrypto
Related CVEs — Oberon microsystems AG ocrypto

In the same product, most dangerous first.

CVE-2025-7071MEDIUMTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto libraryEPSS 0.1%