Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-41990

Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a bounds check but do not use attacker-controlled data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.8%
CVSS Severity
CVSS v3 Score 4.0
Products affected by CVE-2026-41990
  • Gnupg » Libgcrypt » Version: 1.12.0
    cpe:2.3:a:gnupg:libgcrypt:1.12.0
  • Gnupg » Libgcrypt » Version: 1.12.1
    cpe:2.3:a:gnupg:libgcrypt:1.12.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved