|
Vulnerabilities
< Back

CVE-2026-44167

Updated on 12 May 2026

Severity

7.5 High severity

Details

CVSS score
7.5
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44167 NVD lastModified: 2026-05-13

Details

Affected product:
phpseclib/phpseclib
Affected packages:
phpseclib/phpseclib @ 0.3.10

phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.

NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-44167 NVD lastModified: 2026-05-13

Fixes