CVE-2026-32935
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
CVE-2026-32935- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-208
- Updated
- 2026-11-02
EUVDEUVD-2026-13507
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
EUVD-2026-13507- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-94g3-g5v7-q4jg
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
Impact
Those using AES in CBC mode may be susceptible to a padding oracle timing attack.
Patches
https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788
Workarounds
Use AES in CTR, CFB or OFB modes
References
https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788
- Record
GHSA-94g3-g5v7-q4jg- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-208
- Updated
- 2026-11-02
NVD
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
CVE-2026-32935- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-208
- Updated
- 2026-11-02
OSV
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
CVE-2026-32935- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-208
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-32935
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
DEBIAN-CVE-2026-32935- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-94g3-g5v7-q4jg
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
Impact
Those using AES in CBC mode may be susceptible to a padding oracle timing attack.
Patches
https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788
Workarounds
Use AES in CTR, CFB or OFB modes
References
https://github.com/phpseclib/phpseclib/commit/ccc21aef71eb170e9bf819b167e67d1fd9e6e788
- Record
GHSA-94g3-g5v7-q4jg- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-208
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-32935
phpseclib is a PHP secure communications library. Projects using versions 0.1.1 through 1.0.26, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
- Record
UBUNTU-CVE-2026-32935- CVSS 4.0
- 8.2 High
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1779065206 No score
TuxCare security update for phpseclib/phpseclib (4 CVEs)
TuxCare rebuilt phpseclib/phpseclib to address 4 CVEs. Fixed in 0.3.10-p1+tuxcare.
- Record
CLSA-2026-1779065206- Updated
- 2026-11-02
OSVUSN-8769-1 No score
phpseclib vulnerability
It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information.
- Record
USN-8769-1- Updated
- 2026-11-02
OSVUSN-8830-1 No score
php-phpseclib vulnerabilities
It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC mode. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-32935)
It was discovered that phpseclib did not use a constant-time comparison when validating SSH packet authentication codes. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40194)
It was discovered that phpseclib did not properly limit object identifier lengths when parsing ASN.1 data. An attacker could possibly use this issue to cause phpseclib to use excessive resources, leading to a denial of service. (CVE-2026-44167)
- Record
USN-8830-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
phpseclib/phpseclibPackagist |
3.0.0 to 3.0.49 | 3.0.50 |
phpseclib/phpseclibPackagist |
2.0.0 to 2.0.51 | 2.0.52 |
phpseclib/phpseclibPackagist |
0.1.1 to 1.0.26 | 1.0.27 |
phpseclib/phpseclibTuxCare:Packagist From an advisory covering 4 CVEs |
0.3.10 up to 0.3.10-p1+tuxcare | 0.3.10-p1+tuxcare |
php-phpseclibDebian:12 |
before 2.0.42-1+deb12u3, plus listed versions 2.0.42-12.0.42-1+deb12u12.0.42-1+deb12u2 |
2.0.42-1+deb12u3 |
php-phpseclibDebian:13 |
before 2.0.48-3+deb13u1, plus listed versions 2.0.48-3 |
2.0.48-3+deb13u1 |
php-phpseclibDebian:14 |
before 2.0.52-1, plus listed versions 2.0.48-32.0.49-12.0.50-12.0.51-1 |
2.0.52-1 |
php-phpseclib3Debian:12 |
before 3.0.19-1+deb12u4, plus listed versions 3.0.19-13.0.19-1+deb12u13.0.19-1+deb12u23.0.19-1+deb12u3 |
3.0.19-1+deb12u4 |
php-phpseclib3Debian:13 |
before 3.0.43-2+deb13u1, plus listed versions 3.0.43-2 |
3.0.43-2+deb13u1 |
php-phpseclib3Debian:14 |
before 3.0.50-1, plus listed versions 3.0.43-23.0.44-13.0.44-23.0.45-13.0.46-1 Show 4 moreShow less3.0.46-23.0.47-13.0.48-13.0.49-1 |
3.0.50-1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
phpseclibDebian:12 |
before 1.0.20-1+deb12u3, plus listed versions 1.0.20-11.0.20-1+deb12u11.0.20-1+deb12u2 |
1.0.20-1+deb12u3 |
phpseclibDebian:13 |
before 1.0.23-6+deb13u1, plus listed versions 1.0.23-6 |
1.0.23-6+deb13u1 |
phpseclibDebian:11 From an advisory covering 2 CVEs |
before 1.0.19-3+deb11u3, plus listed versions 1.0.19-31.0.19-3+deb11u11.0.19-3+deb11u2 |
1.0.19-3+deb11u3 |
phpseclib/phpseclibPackagist |
3.0.0 up to 3.0.50, plus listed versions 3.0.13.0.103.0.113.0.123.0.13 Show 35 moreShow less3.0.143.0.153.0.163.0.173.0.183.0.193.0.23.0.203.0.213.0.223.0.233.0.33.0.333.0.343.0.353.0.363.0.373.0.383.0.393.0.43.0.403.0.413.0.423.0.433.0.443.0.453.0.463.0.473.0.483.0.493.0.53.0.63.0.73.0.83.0.9 |
3.0.50 |
phpseclib/phpseclibPackagist |
2.0.0 up to 2.0.52, plus listed versions 2.0.12.0.102.0.112.0.122.0.13 Show 45 moreShow less2.0.142.0.152.0.162.0.172.0.182.0.192.0.22.0.202.0.212.0.222.0.232.0.242.0.252.0.262.0.272.0.282.0.292.0.32.0.302.0.312.0.322.0.332.0.342.0.352.0.362.0.372.0.382.0.392.0.42.0.402.0.412.0.422.0.432.0.442.0.452.0.462.0.472.0.482.0.492.0.52.0.502.0.512.0.62.0.72.0.8 |
2.0.52 |
phpseclib/phpseclibPackagist |
0.1.1 up to 1.0.27, plus listed versions 0.3.00.3.10.3.100.3.50.3.6 Show 30 moreShow less0.3.70.3.80.3.91.0.01.0.11.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.21.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.31.0.41.0.51.0.61.0.71.0.81.0.9 |
1.0.27 |
php-phpseclibUbuntu:Pro:16.04:LTS |
before 2.0.1-1ubuntu0.1~esm1, plus listed versions 2.0.1-12.0.1-1build1 |
2.0.1-1ubuntu0.1~esm1 |
php-phpseclibUbuntu:Pro:18.04:LTS |
before 2.0.9-1ubuntu0.1~esm3, plus listed versions 2.0.6-12.0.7-12.0.9-12.0.9-1ubuntu0.1~esm2 |
2.0.9-1ubuntu0.1~esm3 |
phpseclibUbuntu:Pro:18.04:LTS |
before 1.0.9-1ubuntu0.1~esm2, plus listed versions 1.0.7-11.0.8-11.0.9-11.0.9-1ubuntu0.1~esm1 |
1.0.9-1ubuntu0.1~esm2 |
php-phpseclibUbuntu:Pro:20.04:LTS |
before 2.0.23-2ubuntu0.1~esm3, plus listed versions 2.0.21-22.0.23-22.0.23-2ubuntu0.1~esm2 |
2.0.23-2ubuntu0.1~esm3 |
phpseclibUbuntu:Pro:20.04:LTS |
before 1.0.18-2ubuntu0.1~esm2, plus listed versions 1.0.16-21.0.18-21.0.18-2ubuntu0.1~esm1 |
1.0.18-2ubuntu0.1~esm2 |
phpseclibUbuntu:22.04:LTS |
before 1.0.20-1+deb12u3build0.22.04.1, plus listed versions 1.0.19-3ubuntu21.0.19-3ubuntu31.0.20-1 |
1.0.20-1+deb12u3build0.22.04.1 |
php-phpseclibUbuntu:Pro:22.04:LTS |
before 2.0.36-1ubuntu0.1~esm3, plus listed versions 2.0.30-2ubuntu12.0.34-12.0.35-12.0.36-12.0.36-1ubuntu0.1~esm2 |
2.0.36-1ubuntu0.1~esm3 |
php-phpseclib3Ubuntu:Pro:22.04:LTS |
All versions, plus listed versions 3.0.9-13.0.10-13.0.12-23.0.13-13.0.13-1ubuntu0.1~esm1 |
None known |
php-phpseclib3Ubuntu:24.04:LTS |
All versions, plus listed versions 3.0.21-23.0.33-13.0.34-13.0.35-13.0.37-1 |
None known |
php-phpseclibUbuntu:Pro:24.04:LTS |
before 2.0.47-1ubuntu0.1~esm1, plus listed versions 2.0.44-12.0.45-12.0.46-12.0.47-1 |
2.0.47-1ubuntu0.1~esm1 |
phpseclibUbuntu:Pro:24.04:LTS |
before 1.0.23-1ubuntu0.1~esm1, plus listed versions 1.0.21-21.0.22-11.0.23-1 |
1.0.23-1ubuntu0.1~esm1 |
php-phpseclibUbuntu:25.10 |
All versions, plus listed versions 2.0.48-3 |
None known |
php-phpseclib3Ubuntu:25.10 |
All versions, plus listed versions 3.0.43-2 |
None known |
phpseclibUbuntu:25.10 |
All versions, plus listed versions 1.0.23-6 |
None known |
php-phpseclib3Ubuntu:26.10 |
All versions, plus listed versions 3.0.49-1ubuntu13.0.57-1 |
None known |
php-phpseclib3Ubuntu:26.04:LTS |
All versions, plus listed versions 3.0.43-23.0.44-13.0.47-13.0.49-13.0.49-1ubuntu1 |
None known |
php-phpseclibUbuntu:Pro:26.04:LTS |
before 2.0.51-1ubuntu0.1~esm1, plus listed versions 2.0.48-32.0.49-12.0.51-1 |
2.0.51-1ubuntu0.1~esm1 |
phpseclibUbuntu:Pro:26.04:LTS |
before 1.0.24-1ubuntu0.1~esm1, plus listed versions 1.0.23-61.0.24-1 |
1.0.24-1ubuntu0.1~esm1 |
phpseclibUbuntu:Pro:16.04:LTS From an advisory covering 5 CVEs |
before 1.0.1-3ubuntu0.1+esm1, plus listed versions 0.3.10-31.0.0-21.0.0-31.0.1-11.0.1-31.0.1-3ubuntu0.1 |
1.0.1-3ubuntu0.1+esm1 |
phpseclibUbuntu:Pro:18.04:LTS From an advisory covering 5 CVEs |
before 1.0.9-1ubuntu0.1~esm2, plus listed versions 1.0.7-11.0.8-11.0.9-11.0.9-1ubuntu0.1~esm1 |
1.0.9-1ubuntu0.1~esm2 |
phpseclibUbuntu:Pro:20.04:LTS From an advisory covering 5 CVEs |
before 1.0.18-2ubuntu0.1~esm2, plus listed versions 1.0.16-21.0.18-21.0.18-2ubuntu0.1~esm1 |
1.0.18-2ubuntu0.1~esm2 |
phpseclibUbuntu:22.04:LTS From an advisory covering 5 CVEs |
before 1.0.20-1+deb12u3build0.22.04.1, plus listed versions 1.0.19-3ubuntu21.0.19-3ubuntu31.0.20-1 |
1.0.20-1+deb12u3build0.22.04.1 |
phpseclibUbuntu:Pro:24.04:LTS From an advisory covering 5 CVEs |
before 1.0.23-1ubuntu0.1~esm1, plus listed versions 1.0.21-21.0.22-11.0.23-1 |
1.0.23-1ubuntu0.1~esm1 |
phpseclibUbuntu:Pro:26.04:LTS From an advisory covering 5 CVEs |
before 1.0.24-1ubuntu0.1~esm1, plus listed versions 1.0.23-61.0.24-1 |
1.0.24-1ubuntu0.1~esm1 |
php-phpseclibUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 2.0.1-1ubuntu0.1~esm1, plus listed versions 2.0.1-12.0.1-1build1 |
2.0.1-1ubuntu0.1~esm1 |
php-phpseclibUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 2.0.9-1ubuntu0.1~esm3, plus listed versions 2.0.6-12.0.7-12.0.9-12.0.9-1ubuntu0.1~esm2 |
2.0.9-1ubuntu0.1~esm3 |
php-phpseclibUbuntu:Pro:20.04:LTS From an advisory covering 3 CVEs |
before 2.0.23-2ubuntu0.1~esm3, plus listed versions 2.0.21-22.0.23-22.0.23-2ubuntu0.1~esm2 |
2.0.23-2ubuntu0.1~esm3 |
php-phpseclibUbuntu:Pro:22.04:LTS From an advisory covering 3 CVEs |
before 2.0.36-1ubuntu0.1~esm3, plus listed versions 2.0.30-2ubuntu12.0.34-12.0.35-12.0.36-12.0.36-1ubuntu0.1~esm2 |
2.0.36-1ubuntu0.1~esm3 |
php-phpseclibUbuntu:Pro:24.04:LTS From an advisory covering 3 CVEs |
before 2.0.47-1ubuntu0.1~esm1, plus listed versions 2.0.44-12.0.45-12.0.46-12.0.47-1 |
2.0.47-1ubuntu0.1~esm1 |
php-phpseclibUbuntu:Pro:26.04:LTS From an advisory covering 3 CVEs |
before 2.0.51-1ubuntu0.1~esm1, plus listed versions 2.0.48-32.0.49-12.0.51-1 |
2.0.51-1ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-32935 is a high vulnerability (CVSS 8.2) in Phpseclib, published March 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in phpseclib/phpseclib 3.0.50.
References
github.com/phpseclib/phpseclib/security/advisories/GHSA-94g3-g5v7-q4jg
nvd.nist.gov/vuln/detail/CVE-2026-32935
security-tracker.debian.org/tracker/CVE-2026-32935
Show 11 moreShow less
ubuntu.com/security/CVE-2026-32935
cve.org/CVERecord?id=CVE-2026-32935
Left out here: 1 version. The JSON record has them.