CVE-2026-5598Suited to automated attack · CISA
Non-constant time comparisons risk private key leakage in FrodoKEM.
CVSS score
8.9
EPSS probability
%1.0
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-3505
Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.
LO
Patch verifiedEPSS %1
8.7
CVE-2026-58060
HSS public-key level count unbounded, enabling huge allocation on verify
LO
Patch verifiedEPSS %1
8.7
CVE-2026-59646
DTLS handshake reassembler allocates buffer from unchecked 24-bit length
LO
Patch verifiedEPSS %1
6.3
CVE-2026-5588
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
LO
Patch verifiedEPSS %1
8.7
CVE-2026-58059
Quadratic-time escaping when stringifying X.500 distinguished names
LO
Patch verifiedEPSS %0
8.7
CVE-2026-59644
MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
LO
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-5598"