CVE-2026-6094

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

June 25, 2026

Last Seen

June 26, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-6094: Heap Buffer Overread Vulnerability in PKCS7 Processing54.3

CVE-2026-6094 is a heap buffer overread vulnerability found in the wc_PKCS7_DecodeEnvelopedData function, which processes crafted PKCS7 EnvelopedData structures. This vulnerability can be exploited by unauthenticated attackers through specially crafted S/MIME or CMS messages, potentially disclosing...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-6094: Heap Buffer Overread Vulnerability in PKCS7 Processing

Jun 26·1 sources

Related Articles (4)

CVE-2026-6094 CVE Vulnerability Disclosures / 16h Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

cve.report·Jun 26

CVE-2026-6094 National Vulnerability Database / 16h Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

nvd.nist.gov·Jun 26

CVE-2026-6094 AKAOMA CVE VULNERABILITIES / 15h Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

cve.akaoma.com·Jun 26

CVE-2026-6094 - Exploits & Severity

Related Entities

Zero-day Exploit Data Breach Debian CWE-125 - Out-of-bounds Read CMS S/mime Pkcs7