CWE-208.

OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading

• openemr
• Information disclosure
• CWE-208

HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay

• sysadminsmedia homebox
• CWE-204
• CWE-208

Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier

• CWE-208

secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

• sgbett secp256k1-native
• CWE-208
• CWE-1255

Picsou vulnerable to login timing attack

• Zoeille picsou-finance
• CWE-208

Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets

• WatchGuard Fireware OS
• Other injection
• CWE-20

Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

• CWE-208

>=1.10.0, <1.11.13 · fixed in 1.11.13

SAML SSO - Service Provider - Critical - Weak cryptographic practices - SA-CONTRIB-2026-144

• Drupal SAML SSO - Service Provider
• CWE-208

Lack of Reproducible Vulnerability Evidence in QNAP Report

• QNAP Systems Inc. QuRouter
• CWE-208

Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check

• cockpit
• CWE-208

Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparison

• Red Hat OpenStack Platform 18.0
• CWE-208

Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

• gophish
• CWE-208

HQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight sampler

• Legion of the Bouncy Castle Inc. BC-JAVA
• CWE-208

NTRU leaks private key information by reducing secret values with a non-constant-time integer division

• Legion of the Bouncy Castle Inc. BC-JAVA
• CWE-208

Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)

• CWE-208

>=3.0.0, <4.0.0 · fixed in 4.0.0

Timing Side-Channel in SM2 Signature Generation

• OpenSSL
• CWE-208

Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V

• OpenSSL
• CWE-208

Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves

• OpenSSL
• CWE-208

GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

• GitHub Enterprise Server
• Server-side request forgery (SSRF)
• CWE-208

Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle

• CWE-208

* · no fixed version yet

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

• CWE-208

<1.5.5 · fixed in 1.5.5

Tinyauth: User enumeration attack by timing oracle

• CWE-208

<1.0.1-0.20260714134959-c22925c2fba9 · fixed in 1.0.1-0.20260714134959-c22925c2fba9

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

• CWE-208

<0.0.0-20260713141742-763625a20721 || >=0.1.0, <=1.1.5 · fixed in 0.0.0-20260713141742-763625a20721

Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

• CWE-208

<2.4.1 · fixed in 2.4.1

dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy

• dgtlmoon changedetection.io
• Information disclosure
• CWE-208

Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

• CWE-208

<2.0.16 · fixed in 2.0.16

An issue was discovered in Nagios XI before 5.9.3.

• Nagios XI
• CWE-208

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml.

• OCaml mirage-crypto-ec
• CWE-208

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

• CWE-208
• CWE-385

<3.0.57 || >=4.0.0, <4.0.1 · fixed in 3.0.57, 4.0.1

Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

• PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module
• CWE-208

Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106

• Drupal Commerce CyberSource
• CWE-208

Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing

• cockpit
• CWE-208

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

• Information disclosure
• CWE-208

<1.4.5 · fixed in 1.4.5

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

• Weak cryptography or TLS
• CWE-208

<5.14.1 · fixed in 5.14.1

Dimension Blind SSRF via Database Test Connection Feature

• WatchGuard Dimension
• Server-side request forgery (SSRF)
• CWE-208

Timing Attack via Non-Constant-Time Comparison of Sensitive Values

• Spring Security
• CWE-208

Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090

• Drupal Token Content Access
• CWE-208

Duplicate Advisory: Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

• CWE-208

* · no fixed version yet

Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison

• grav
• CWE-208

WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

• weechat
• CWE-208

Wazuh: Username Enumeration via Timing Side-Channel

• wazuh
• CWE-208

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify

• CWE-208

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

• Path traversal
• Information disclosure

<3.3.0 · fixed in 3.3.0

Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto

• Oberon microsystems AG ocrypto
• Weak cryptography or TLS
• CWE-208

Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto

• Oberon microsystems AG Oberon PSA Crypto
• Weak cryptography or TLS
• CWE-208

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks,…

• AMD Vitis™ Libraries - Security Module
• AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows
• CWE-208

CVE-2026-6727

• Trusted Computing Group TPM2.0
• CWE-208

Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack

• Apache Software Foundation Apache Portable Runtime Utility
• CWE-208

Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout

• OMICRON electronics GmbH OMICRON StationScout
• CWE-208

Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard

• OMICRON electronics GmbH OMICRON StationGuard
• CWE-208

Jenkins Project Jenkins Webhook Secret Credentials Provider…: Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earlier does not…

• Jenkins Project Jenkins Webhook Secret Credentials Provider Plugin
• CWE-208

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

• Information disclosure
• CWE-208

>=44.0.0, <50.0.0 · fixed in 50.0.0

PaperCut NG/MF: User enumeration via timing attack

• PaperCut NG/MF
• CWE-208

ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)

• Legion of the Bouncy Castle Inc. BC-JAVA
• CWE-208

Open WebUI: Account enumeration via observable login timing discrepancy

• CWE-208

<0.10.0 · fixed in 0.10.0

RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX

• Progress Software Telerik UI for ASP.NET AJAX
• CWE-208

Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification

• Google Tink-Java
• Google Tink-Android
• CWE-208

Crypt::Password versions through 0.28 for Perl are susceptible to timing attacks

• DRSTEVE Crypt::Password
• CWE-208

Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison

• JBERGER Mojo::JWT
• CWE-208

HCL BigFix Platform is affected by a user enumeration vulnerability

• HCLSoftware HCL BigFix Platform
• CWE-208