CVE-2026-16459: Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto
Published Aug 13, 2026
·Updated
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
Affected Software
1 affected component
Oberon microsystem AG Oberon PSA Crypto>1.0.0<=2.1.1
Event History
Aug 13, 2026
CVE Published
via MITRE·08:29 AM
Data Sourced
via MITRE·08:29 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-16459?
CVE-2026-16459 has a risk score of 55, indicating a moderate severity level.
2
How do I fix CVE-2026-16459?
To fix CVE-2026-16459, update the Oberon PSA Crypto library to version 2.1.1 or later.
3
What systems are affected by CVE-2026-16459?
CVE-2026-16459 affects all versions of Oberon PSA Crypto from 1.0.0 to prior to 2.1.1.
4
What type of attack does CVE-2026-16459 enable?
CVE-2026-16459 enables a padding oracle attack that allows attackers to recover plaintexts from RSA decrypt operations.
5
What library is vulnerable in CVE-2026-16459?
The vulnerability in CVE-2026-16459 is found in the Oberon PSA Crypto library developed by Oberon microsystem AG.