Critical Alert 1 Active Exploit Detected Today

CVE-2026-0257 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability →
Powered by CVE Watchtower
×
Home Β» CVE Watchtower

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

← Back to CVE List

CVE-2025-7396NVD

Description

In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.
Severity Level
MEDIUM (5.6)
Published Date
18/07/2025
Last Modified
22/07/2025
Exploitation Status
UNKNOWN