Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.

oracle_linux ELSA-2026-501440: ELSA-2026-50144-0:  libgcrypt security update (MODERATE)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50147 advisory.

    The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

    Security Fix(es):

    * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:50144 advisory.

    The libgcrypt library provides general-purpose implementations of various cryptographic algorithms.

    Security Fix(es):

    * Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47117 advisory.

    [1.8.5-8]
    - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21387-1 advisory.

    This update for libgcrypt fixes the following issue

    - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service (bsc#1262684).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3182-1 advisory.

    This update for libgcrypt fixes the following issue

    - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial     of service       (bsc#1262684).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt.(CVE-2026-41989)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libgcrypt security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the  package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt.(CVE-2026-41989)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt.(CVE-2026-41989)

Tenable has extracted the preceding description block directly from the EulerOS libgcrypt security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libgcrypt-1.10.0-12.el9 build changelog.

  - Denial of Service and buffer overflow via crafted ECDH ciphertext (CVE-2026-41989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libgcrypt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt.(CVE-2026-41989)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libgcrypt security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8319-1 advisory.

    It was discovered that Libgcrypt incorrectly handled crafted ECDH ciphertext. An attacker could possibly     use this issue to cause Libgcrypt to crash, resulting in a denial of service. (CVE-2026-41989)

    It was discovered that Libgcrypt incorrectly handled Dilithium signing. An attacker could possibly use     this issue to cause Libgcrypt to crash, resulting in a denial of service. This issue only affected Ubuntu     26.04 LTS. (CVE-2026-41990)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6294 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6294-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     May 22, 2026                          https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libgcrypt20     CVE ID         : CVE-2026-41989

    It was discovered that an incorrect implementation of ECDH encryption     (with NIST, Brainpool, X448, or X25519 curves) within Libgcrypt could     result in denial of service.

    For the oldstable distribution (bookworm), this problem has been fixed     in version 1.10.1-3+deb12u1.

    For the stable distribution (trixie), this problem has been fixed in     version 1.11.0-7+deb13u1.

    We recommend that you upgrade your libgcrypt20 packages.

    For the detailed security status of libgcrypt20 please refer to its     security tracker page at:
    https://security-tracker.debian.org/tracker/libgcrypt20

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1705 advisory.

    Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt. (CVE-2026-41989)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8409145c11 advisory.

    Fix CVE-2026-41989 (#2461782)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9a79c58afd advisory.

    New upstream release (#2458643) fixing CVE-2026-41989 (#2461782)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted     ECDH ciphertext to gcry_pk_decrypt. (CVE-2026-41989)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
331962	RHEL 9 : libgcrypt (RHSA-2026:50147)	Nessus	Red Hat Local Security Checks	medium
331957	RHEL 10 : libgcrypt (RHSA-2026:50144)	Nessus	Red Hat Local Security Checks	medium
331370	Oracle Linux 8 : libgcrypt (ELSA-2026-47117)	Nessus	Oracle Linux Local Security Checks	medium
505683	Siemens SIMATIC S7-1500 CPU 1518 MFP Out-of-bounds Write (CVE-2026-41989)	Tenable OT Security	Tenable.ot	medium
329304	openSUSE 16: libgcrypt-devel / libgcrypt-devel-x86-64-v3 / libgcrypt20 / etc (openSUSE-SU-2026:21387-1)	Nessus	SuSE Local Security Checks	medium
329134	SUSE SLED15 / SLES15 Security Update : libgcrypt (SUSE-SU-2026:3182-1)	Nessus	SuSE Local Security Checks	medium
328553	EulerOS Virtualization 2.12.0 : libgcrypt (EulerOS-SA-2026-2781)	Nessus	Huawei Local Security Checks	medium
328536	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2735)	Nessus	Huawei Local Security Checks	medium
326150	EulerOS 2.0 SP12 : libgcrypt (EulerOS-SA-2026-2540)	Nessus	Huawei Local Security Checks	medium
326134	EulerOS 2.0 SP12 : libgcrypt (EulerOS-SA-2026-2600)	Nessus	Huawei Local Security Checks	medium
324006	CentOS 9 : libgcrypt-1.10.0-12.el9	Nessus	CentOS Local Security Checks	medium
323190	EulerOS 2.0 SP15 : libgcrypt (EulerOS-SA-2026-2488)	Nessus	Huawei Local Security Checks	medium
323187	EulerOS 2.0 SP15 : libgcrypt (EulerOS-SA-2026-2447)	Nessus	Huawei Local Security Checks	medium
320735	EulerOS Virtualization 2.13.0 : libgcrypt (EulerOS-SA-2026-2403)	Nessus	Huawei Local Security Checks	medium
320728	EulerOS Virtualization 2.13.1 : libgcrypt (EulerOS-SA-2026-2374)	Nessus	Huawei Local Security Checks	medium
320230	EulerOS 2.0 SP13 : libgcrypt (EulerOS-SA-2026-2339)	Nessus	Huawei Local Security Checks	medium
320228	EulerOS 2.0 SP13 : libgcrypt (EulerOS-SA-2026-2296)	Nessus	Huawei Local Security Checks	medium
317478	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Libgcrypt vulnerabilities (USN-8319-1)	Nessus	Ubuntu Local Security Checks	medium
316550	Debian dsa-6294 : libgcrypt-bin - security update	Nessus	Debian Local Security Checks	medium
315026	Amazon Linux 2023 : libgcrypt, libgcrypt-devel (ALAS2023-2026-1705)	Nessus	Amazon Linux Local Security Checks	medium
311164	Fedora 43 : libgcrypt (2026-8409145c11)	Nessus	Fedora Local Security Checks	medium
311104	Fedora 44 : libgcrypt (2026-9a79c58afd)	Nessus	Fedora Local Security Checks	medium
309928	Linux Distros Unpatched Vulnerability : CVE-2026-41989	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-41989

medium

Tenable Plugins

Coming Soon

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium