8.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-32935

CVE-2026-32935: phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack

phpseclib is a PHP secure communications library. Projects using versions 1.0.26 and below, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-32935

CVE-2026-32935:

8.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
phpseclib/phpseclib	composer	>= 3.0.0, <= 3.0.49	3.0.50
phpseclib/phpseclib	composer	>= 2.0.0, <= 2.0.51	2.0.52
phpseclib/phpseclib	composer	<= 1.0.26	1.0.27

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the security advisory and the associated patch commit ccc21aef71eb170e9bf819b167e67d1fd9e6e788 points directly to a timing vulnerability in the CBC mode unpadding logic. The commit message "make unpadding constant time" and the specific code change from a logical OR (||) to a bitwise OR (|) within the _unpad function in phpseclib/Crypt/Base.php are clear indicators of a padding oracle timing attack mitigation. The vulnerable function is Crypt_Base::_unpad, as it is responsible for handling the padding of the ciphertext, and the timing difference in its execution could be exploited. The change ensures that the function's response time is independent of the validity of the padding, thus closing the information leak.

Vulnerable functions

Crypt_Base::_unpad

phpseclib/Crypt/Base.php

The `_unpad` function was vulnerable to a padding oracle timing attack. The use of the short-circuiting logical OR operator (`||`) in the conditional check for padding length created a timing discrepancy. If the first condition (`!$length`) was true, the second condition (`$length > $this->block_size`) would not be evaluated, resulting in a faster execution time. An attacker could abuse this timing difference to iteratively decrypt ciphertext. The patch replaces `||` with the bitwise OR operator `|`, which ensures both conditions are always evaluated, thus making the function's execution time constant and mitigating the timing attack.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.