CVE-2026-3161
published 2026-10-19CVE-2026-3161: IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
PriorityP433medium5.9CVSS 3.1
AVNACHPRNUINSUCHINAN
EPSS
0.21%
10.4th percentile
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | cloud_pak_system | — | — |
| ibm | cloud_pak_system | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
ghsa_unreviewed·2026-10-19
CVE-2026-3161 [MEDIUM] CWE-327 IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Red Hat
timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
vendor_redhat·2026-04-14·CVSS 5.5
CVE-2026-39984 [MEDIUM] CWE-295 timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint checks in VerifyLeafCert uses the first non-CA certificate from the PKCS#7 certificate bag instead of the leaf certificate from the verified chain. An attacker can exploit this by prepending a forged certificate to the certificate bag while the message is signed with an authorized key, causing the library to validate the signature against one certificate but perform authorization checks against another. This vulnera
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-39984 timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
bugzilla·2026-04-15·CVSS 5.5
CVE-2026-39984 [MEDIUM] CVE-2026-39984 timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
CVE-2026-39984 timestamp-authority/v2/pkg/verification: improper certificate validation in verifier
Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint checks in VerifyLeafCert uses the first non-CA certificate from the PKCS#7 certificate bag instead of the leaf certificate from the verified chain. An attacker can exploit this by prepending a forged certificate to the certificate bag while the message is signed with an authorized key, causing the library to validate the signature against one certificate but perform authorization checks against anothe
Bugzilla
CVE-2026-33753 rfc3161-client: rfc3161-client: Authorization bypass allows impersonation of TimeStamping Authority
bugzilla·2026-04-08·CVSS 6.2
CVE-2026-33753 [MEDIUM] CVE-2026-33753 rfc3161-client: rfc3161-client: Authorization bypass allows impersonation of TimeStamping Authority
CVE-2026-33753 rfc3161-client: rfc3161-client: Authorization bypass allows impersonation of TimeStamping Authority
rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority (TSA). By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS#7 bag of certificates, an attacker can append a spoofed certificate matching the target common_name and Extended Key Usage (EKU) requirements. This tricks the library into verifying these authorization rules against the forged certificate while validating the cryptographic signature against an actual trusted TS
2026-10-19
Published