CVE-2026-40996

The record

Wss4jSecurityInterceptor defaulted allowRSA15KeyTransportAlgorithm to true, overriding Apache WSS4J's safer default for validation RequestData. Inbound WS-Security decryption could therefore accept RSA PKCS#1 v1.5 (rsa-1_5) encrypted key material unless operators explicitly reconfigured the flag. Affected versions: Spring Web Services 5.0.0 through 5.0.1; 4.1.0 through 4.1.3; 4.0.0 through 4.0.18; 3.1.0 through 3.1.8.

Affected packages

Related vulnerabilities

• CVE-2026-81822 The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards… CWE-327
• CVE-2026-16693 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain… CWE-327
• CVE-2026-81859 CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive… CWE-327
• CVE-2026-76133 The affected Ebyte product uses a deprecated hashing algorithm in an… CWE-327
• CVE-2026-39944 Ceph is an open-source distributed storage platform providing object, block, and file… CWE-327
• CVE-2026-78236 An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate… CWE-327
• CVE-2026-74888 openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation… CWE-327
• CVE-2026-27871 Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson… CWE-327