UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-56898
In aes256_cmac_sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Cve id
- CVE-2026-56898
- First seen by Signal
- 2026-11-10T23:31:41+00:00
- Retrieved at
- 2026-11-10T23:34:23+00:00
- Published at
- 2026-11-10T20:19:14.570
- Last modified
- 2026-11-10T21:46:38.460
Explore deeper with Ninja Signal's threat intelligence graph