PT-2026-57320 · Phalcon · Cphalcon
CVE-2026-54736
·
Published
2026-07-10
·
Updated
2026-08-28
CVSS v4.0
8.2
High
| Vector | AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Phalcon versions prior to 5.14.1
Description
The
decrypt() function within PhalconEncryptionCrypt uses a byte-wise identity comparison to verify the HMAC tag. Because this comparison returns early upon encountering the first differing byte, it creates a timing discrepancy. An attacker can exploit this side-channel to recover a valid tag byte-by-byte, allowing them to attach it to a chosen IV and ciphertext so the system accepts tampered encrypted content as authentic.Recommendations
Update to version 5.14.1.
Exploit
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cphalcon