CVE-2026-16459mediumCWE-208CWE-327

CVE-2026-16459: medium-severity vulnerability in Oberon PSA Crypto

Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto

Published

Follow this CVE+ Monitor Oberon PSA Crypto

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.1%
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Oberon microsystems AG · Oberon PSA Crypto
Related CVEs — Oberon PSA Crypto

In the same product, most dangerous first.

CVE-2025-9071LOWInsecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA CryptoEPSS 0.2%CVE-2025-7383MEDIUMTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto libraryEPSS 0.1%