CVE-2026-44167
EUVD-2026-2972412.05.2026, 18:17
phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a bypass of CVE-2024-27355. This vulnerability is fixed in 1.0.29, 2.0.54, and 3.0.52.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| phpseclib | phpseclib | 3.0.0 ≤ 𝑥 < 3.0.52 | CNA |
| phpseclib | phpseclib | 2.0.0 ≤ 𝑥 < 2.0.54 | CNA |
| phpseclib | phpseclib | 0.1.1 ≤ 𝑥 < 1.0.29 | CNA |
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php-phpseclib |
| ||||||||||||
| php-phpseclib3 |
| ||||||||||||
| phpseclib |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| php-phpseclib |
| ||||||||||||||
| php-phpseclib3 |
| ||||||||||||||
| phpseclib |
|