CVE Catalog
CVE-2026-16459
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.07%
0th percentile - higher than 0% of all known CVEs
Summary
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
Risk Assessment
An attacker could recover encrypted data, potentially compromising the confidentiality of information protected by RSA.
Recommendation
Upgrade the Oberon PSA Crypto library to version 2.1.1 or later, which includes the fix.
Original NVD description (English source)
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.