VULNERABILITY INTELLIGENCE

CVE-2026-7511

CVSS score5.9 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-06-27
CVSS vectorCVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Description

PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.

Weakness classification

  • CWE-347: Improper Verification of Cryptographic Signature

Primary references