phpseclib CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM phpseclib CVE published 2026-09-01

CVE-2026-84308

The CVE-2026-84308 vulnerability affects phpseclib, a PHP secure communications library, specifically in its pure-PHP X25519 scalar multiplication implementation. This vulnerability allows a local observer to potentially recover a reused 251-bit clamped private scalar, compromising operations that reuse that key. The issue arises from data-dependent conditional modular reductions in the add() and subtract [truncated]