Question 1

What is CVE-2026-6094 — CVE-2026-6094?

Accepted Answer

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

Question 2

What is the authoritative source for CVE-2026-6094?

Accepted Answer

CVE-2026-6094 (CVE-2026-6094) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-6094CVE-2026-6094

Description

Scoring