Skip to content

CVE record · 2 sources

CVE-2026-110310

CVSS 5.3

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's…

Vendor: Oracle
Product: oracle
CVSS: 5.3
Exposure class: Cloud platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

AWS bulletin AWS 17d ago

CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET

Bulletin ID: 2026-135-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/14/2026 12:30 PM PDT Description: We identified CVE-2026-110310, an issue in Amazon S3 encryption client for .NET that could…

CVE-2026-110310 Amazon Web Services Oracle
3

CVE NVD 17d ago

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's…

A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. Since this padding scheme is susceptible to the…

CVSS 5.3 No fix yet CVE-2026-110310 Oracle