DEBIAN-CVE-2026-55599

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-55599
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-55599
Upstream
Published
2026-06-22T21:16:25Z
Modified
2026-09-14T17:03:46Z
Severity
  • 5.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an application validates an untrusted X.509 certificate with phpseclib, X509::validateSignature() reads a URL out of that certificate's Authority Information Access (AIA) extension and connects to it. Attacker who supplies certificate fully controls host, port, and path of that connection. URL fetching is enabled by default, and no destination is blocked. An unauthenticated attacker can therefore make a validating server open connections to internal hosts and ports it should never reach, for example loopback 127.0.0.1, cloud metadata address 169.254.169.254, and internal-only services. This is a server-side request forgery (SSRF) caused by an insecure default. This vulnerability is fixed in 1.0.30, 2.0.55, and 3.0.54.

References

Affected packages

Debian:12
php-phpseclib

Package

Name
php-phpseclib
Purl
pkg:deb/debian/php-phpseclib?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.0.42-1
2.0.42-1+deb12u1
2.0.42-1+deb12u2
2.0.42-1+deb12u3
2.0.42-1+deb12u5
2.0.44-1
2.0.45-1
2.0.46-1
2.0.47-1
2.0.47-2
2.0.47-3
2.0.48-1
2.0.48-2
2.0.48-3
2.0.49-1
2.0.50-1
2.0.51-1
2.0.52-1
2.0.53-1
2.0.54-1
2.0.55-1
3.*
3.0.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
php-phpseclib3

Package

Name
php-phpseclib3
Purl
pkg:deb/debian/php-phpseclib3?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.19-1
3.0.19-1+deb12u1
3.0.19-1+deb12u2
3.0.19-1+deb12u3
3.0.19-1+deb12u4
3.0.19-1+deb12u6
3.0.20-1
3.0.21-1
3.0.21-2
3.0.22-1
3.0.23-1
3.0.33-1
3.0.34-1
3.0.35-1
3.0.36-1
3.0.37-1
3.0.38-1
3.0.39-1
3.0.41-1
3.0.42-1
3.0.43-1
3.0.43-2
3.0.44-1
3.0.44-2
3.0.45-1
3.0.46-1
3.0.46-2
3.0.47-1
3.0.48-1
3.0.49-1
3.0.50-1
3.0.51-1
3.0.52-1
3.0.52-2
3.0.53-1
3.0.55-1
3.0.56-1
3.0.57-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
phpseclib

Package

Name
phpseclib
Purl
pkg:deb/debian/phpseclib?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.20-1
1.0.20-1+deb12u1
1.0.20-1+deb12u2
1.0.20-1+deb12u3
1.0.20-1+deb12u5
1.0.21-1
1.0.21-2
1.0.22-1
1.0.23-1
1.0.23-2
1.0.23-3
1.0.23-4
1.0.23-5
1.0.23-6
1.0.24-1
1.0.27-1
1.0.28-1
1.0.29-1
1.0.30-1
2.*
2.0.0-1
2.0.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
Debian:13
php-phpseclib

Package

Name
php-phpseclib
Purl
pkg:deb/debian/php-phpseclib?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

2.*
2.0.48-3
2.0.48-3+deb13u1
2.0.48-3+deb13u3
2.0.49-1
2.0.50-1
2.0.51-1
2.0.52-1
2.0.53-1
2.0.54-1
2.0.55-1
3.*
3.0.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
php-phpseclib3

Package

Name
php-phpseclib3
Purl
pkg:deb/debian/php-phpseclib3?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

3.*
3.0.43-2
3.0.43-2+deb13u1
3.0.43-2+deb13u3
3.0.44-1
3.0.44-2
3.0.45-1
3.0.46-1
3.0.46-2
3.0.47-1
3.0.48-1
3.0.49-1
3.0.50-1
3.0.51-1
3.0.52-1
3.0.52-2
3.0.53-1
3.0.55-1
3.0.56-1
3.0.57-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
phpseclib

Package

Name
phpseclib
Purl
pkg:deb/debian/phpseclib?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.0.23-6
1.0.23-6+deb13u1
1.0.23-6+deb13u3
1.0.24-1
1.0.27-1
1.0.28-1
1.0.29-1
1.0.30-1
2.*
2.0.0-1
2.0.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
Debian:14
php-phpseclib

Package

Name
php-phpseclib
Purl
pkg:deb/debian/php-phpseclib?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.0.55-1

Affected versions

2.*
2.0.48-3
2.0.49-1
2.0.50-1
2.0.51-1
2.0.52-1
2.0.53-1
2.0.54-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"
php-phpseclib3

Package

Name
php-phpseclib3
Purl
pkg:deb/debian/php-phpseclib3?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.55-1

Affected versions

3.*
3.0.43-2
3.0.44-1
3.0.44-2
3.0.45-1
3.0.46-1
3.0.46-2
3.0.47-1
3.0.48-1
3.0.49-1
3.0.50-1
3.0.51-1
3.0.52-1
3.0.52-2
3.0.53-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-55599.json"