PKCS7_verify signer confusion allows forged signatures, where the signer associated with a signature is not correctly bound, permitting a forged signature to be accepted.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-7511.json"