CVE-2026-115408 | Eclipse-keypont KeyPont up to 2.0.0-rc8 ML-KEM Key Pair Lookup data authenticity

October 27, 2026 Yanac

A vulnerability marked as problematic has been reported in Eclipse-keypont KeyPont up to 2.0.0-rc8. Impacted is the function FindMLKEMKeyPair/FindMLKEMKeyPairs/FindMLKEMKeyPairsWithAttributes of the component ML-KEM Key Pair Lookup. Performing a manipulation results in insufficient verification of data authenticity.

This vulnerability is cataloged as CVE-2026-115408. The attack must be initiated from a local position. There is no exploit available.VulDB Recent EntriesRead More