CVE-2026-40194

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 28, 2026

Last Seen

September 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical phpseclib Vulnerabilities Expose Sensitive Data and Cause DoS45.8

Multiple vulnerabilities were discovered in phpseclib, a library for arbitrary-precision integer arithmetic. Notably, CVE-2026-32935 involves a lack of constant-time padding validation in AES CBC mode, potentially allowing remote attackers to obtain sensitive information. CVE-2026-40194 highlights a...