MEDIUM 5.9 NVD

CVE-2026-87737

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: th

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

References

https://osv.dev/vulnerability/OSEC-2026-17

Published: 2026-09-09 · Source: NVD · Feed updated: 2026-09-12

This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-09-09 via NVD.

vulnfeed aggregates 12842 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.