Detections
Analytics
SCA: security update for phpseclib/phpseclib (GHSA-m557-wrgg-6rp4)
medium Tenable Cloud Security Plugin ID 443288
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- phpseclib is a PHP secure communications library. From 0.1.1 until 1.0.30, 2.0.55, and 3.0.54, when an
application validates an untrusted X.509 certificate with phpseclib, X509::validateSignature() reads a URL
out of that certificate's Authority Information Access (AIA) extension and connects to it. Attacker who
supplies certificate fully controls host, port, and path of that connection. URL fetching is enabled by
default, and no destination is blocked. An unauthenticated attacker can therefore make a validating server
open connections to internal hosts and ports it should never reach, for example loopback 127.0.0.1, cloud
metadata address 169.254.169.254, and internal-only services. This is a server-side request forgery (SSRF)
caused by an insecure default. This vulnerability is fixed in 1.0.30, 2.0.55, and 3.0.54. (CVE-2026-55599)
Solution
Update the phpseclib/phpseclib library and its related packages to version 1.0.30 or later.See Also
Plugin Details
Severity: Medium
ID: 443288
Version: Revision 1.2
Type: Local
Family: SCA Checks
Published: 6/16/2026
Updated: 7/8/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2026-55599
CVSS v3
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 5.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 6/16/2026
Vulnerability Publication Date: 6/16/2026
Reference Information
CVE: CVE-2026-55599
cwe: CWE-918