{"id":"CVE-2026-77696","aliases":[],"cve":{"records":[{"id":"CVE-2026-77696","source":"openssl","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-08-21T07:47:36.032Z","published":"2026-09-29T15:32:22.520Z","modified":"2026-11-10T12:49:50.567Z"}],"publishers":[{"name":"openssl","role":"CNA","organizationId":"3a12439a-ef3a-4c79-92e6-6081a721f1e5","modified":"2026-09-29T15:32:22.520Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-29T16:51:33.618Z"},{"name":"siemens-SADP","role":"ADP","organizationId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","modified":"2026-11-10T12:49:50.567Z"}],"references":[{"url":"https://openssl-library.org/news/secadv/20260929.txt","tags":["vendor-advisory"],"source":"openssl"},{"url":"https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","tags":["patch"],"source":"openssl"},{"url":"https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","tags":["patch"],"source":"openssl"},{"url":"https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","tags":["patch"],"source":"openssl"},{"url":"https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","tags":["patch"],"source":"openssl"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","tags":[],"source":"siemens-SADP"}],"weaknesses":[{"id":"CWE-208","description":"CWE-208 Observable Timing Discrepancy","source":"openssl"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-29T16:51:30.070097Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Timing Side-Channel in SM2 Signature Generation","titleSource":"openssl","descriptionSource":"openssl","description":"Issue summary: SM2 signature generation uses non-constant-time arithmetic\non secret values, forming a timing side-channel.\n\nImpact summary: An attacker able to measure SM2 signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: SM2 signature generation computes the signature value using\nvariable-time BIGNUM operations on the secret nonce and the private key, so\nthe time taken to produce an SM2 signature depends on these secret values,\nforming a timing side-channel.\n\nApplications performing SM2 signature generation are affected on all\nplatforms.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm.","score":3.7,"severity":"low","published":"2026-09-29T15:32:22.520Z","modified":"2026-11-10T12:49:50.567Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"OpenSSL","name":"OpenSSL","platforms":[],"versions":[{"version":"4.0.0","status":"affected","lessThan":"4.0.3","versionType":"semver"},{"version":"3.6.0","status":"affected","lessThan":"3.6.5","versionType":"semver"},{"version":"3.5.0","status":"affected","lessThan":"3.5.9","versionType":"semver"},{"version":"3.4.0","status":"affected","lessThan":"3.4.8","versionType":"semver"},{"version":"3.0.0","status":"affected","lessThan":"3.0.23","versionType":"semver"},{"version":"1.1.1","status":"affected","lessThan":"1.1.1zj","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"openssl","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","platforms":[],"versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","platforms":[],"versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","platforms":[],"versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"},{"vendor":"Siemens","name":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","platforms":[],"versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"},{"vendor":"Siemens","name":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","platforms":[],"versions":[{"version":"V3.1.7","status":"affected","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"siemens-SADP","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"}],"remediation":[],"references":["https://openssl-library.org/news/secadv/20260929.txt","https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","https://cert-portal.siemens.com/productcert/html/ssa-457936.html"],"sources":[{"name":"CVE","id":"CVE-2026-77696","modified":"2026-11-10T12:49:50.567Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-77696"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","score":3.7}],"sourceAffected":[],"observedAt":"2026-11-10T13:03:14.090Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T01:55:30.737Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-10T13:10:36.870Z","attemptedAt":"2026-11-10T13:10:36.870Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-10T13:10:36.882Z","attemptedAt":"2026-11-10T13:10:36.882Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-10T13:10:38.713Z","attemptedAt":"2026-11-10T13:10:38.713Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-10T13:10:35.440Z","attemptedAt":"2026-11-10T13:10:35.440Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-77696","url":"https://www.first.org/epss/","probability":0.00396,"percentile":0.3411,"date":"2026-11-09","checkedAt":"2026-11-10T13:10:35.440Z"},{"source":"NVD","id":"CVE-2026-77696","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77696","modified":"2026-10-08T01:20:41.353","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-10T13:10:36.870Z"},{"source":"GitHub Advisory Database","id":"GHSA-9qr7-mmm2-9f2r","url":"https://github.com/advisories/GHSA-9qr7-mmm2-9f2r","modified":"2026-09-29T18:31:49Z","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-10T13:10:36.882Z"},{"source":"ENISA EUVD","id":"EUVD-2026-89012","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-89012","modified":"Sep 29, 2026, 4:51:33 PM","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","checkedAt":"2026-11-10T13:10:38.713Z"}],"aiSummary":null}