Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

phpseclib — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in phpseclib, with AI-generated Chinese analysis, references, and POCs.

Vendor: phpseclib

CVE IDTitleCVSSSeverityPublished
CVE-2026-55599 phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access CWE-918 5.8 Medium2026-06-22
CVE-2026-44167 phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID() CWE-400 7.5 High2026-05-12
CVE-2026-40194 phpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals() CWE-208 3.7 Low2026-04-10
CVE-2026-32935 phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack CWE-208 5.9 -2026-03-20

All 4 known CVE vulnerabilities affecting phpseclib with full Chinese analysis, references, and POCs where available.