{"id":"CVE-2026-16459","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-16459","generatedAt":"2026-10-28T02:19:40.431Z","title":"Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.","description":"Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.","published":"2026-08-13T09:17:12.000Z","lastModified":"2026-10-23T19:10:00.000Z","status":"Deferred","sourceIdentifier":"vulnerability@ncsc.ch","cvss":{"version":"4.0","score":5.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-208","CWE-327"],"affected":[],"epss":{"score":0.00091,"percentile":0.00476,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.oberon.ch/security-advisories/cve-2026-16459/","source":"vulnerability@ncsc.ch"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-16459","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}