OpenSSL RSASVE information disclosure (CVE-2026-31790)

Summary

Failed RSA encapsulation may disclose uninitialized buffer contents.

Vulnerability ID	Vulnerability Overview
CVE-2026-31790	If RSA encryption fails due to an invalid public key, encapsulation can incorrectly return success. This leaves the caller to use the uninitialized or stale contents of the ciphertext buffer, potentially disclosing sensitive data from previous operations.

Affected Supported TeraStations

TS71210
Fixed in firmware version 2.06

TS5020 / TS3003
Fixed in firmware version 3.16

 

Back to Security Notices

Date	Description
09/02/2026	Initial release
10/14/2026	Update

Back to Security Notices