{"id":"CVE-2026-58945","kind":"vulnerability","aliases":["CVE-2026-58945"],"related":[],"title":"Unknown product: side-channel flaw leaks paired device information via crypto misuse","description":"In multiple locations, there is a possible side channel information leak due to improperly used crypto. This could lead to paired device information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Improper use of cryptography in several code locations creates a side channel that can leak information about paired devices. An attacker can read that paired device information without extra execution privileges and without user interaction.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other","paired-devices"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:51+00:00","first_seen_at":"2026-11-02T20:35:33+00:00","triaged_at":"2026-11-02T20:38:41+00:00","updated_at":"2026-11-02T20:38:41+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-02T20:38:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Unknown product: side-channel flaw leaks paired device information via crypto misuse","impact":"low","summary":"Improper use of cryptography in several code locations creates a side channel that can leak information about paired devices. An attacker can read that paired device information without extra execution privileges and without user interaction.","audience":"everyone","category":"other","nicknames":[],"who_cares":["paired-devices"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"paired device information is disclosed to an attacker","analyst_note":"NVD entry gives no affected product, versions or fix; find the vendor advisory and the affected product from the CVE record.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000575,"input_tokens":4074,"output_tokens":336,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-58945':16A,19A 'addit':85C 'attack':44B 'channel':5A,35B,67C 'code':30B 'could':76C 'creat':32B 'crypto':12A,74C 'cryptographi':27B 'cve':14A,17A 'devic':9A,23B,42B,49B,80C 'disclosur':82C 'due':70C 'execut':53B,86C 'exploit':95C 'extra':52B 'flaw':6A 'improp':24B,72C 'inform':10A,39B,50B,68C,81C 'interact':58B,90C 'lead':77C 'leak':7A,38B,69C 'locat':31B,61C 'misus':13A 'multipl':60C 'need':88C,93C 'pair':8A,22B,41B,48B,79C 'paired-devic':21B 'possibl':65C 'privileg':54B,87C 'product':2A 'read':46B 'sever':29B 'side':4A,34B,66C 'side-channel':3A 'unknown':1A 'use':25B,73C 'user':57B,89C 'via':11A 'without':51B,56B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","paireddevices","unknown"],"first_public_at":"2026-11-02T20:17:51+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58945","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58945","severity":null,"published_at":"2026-11-02T20:17:51+00:00","modified_at":"2026-11-02T20:17:51+00:00","first_seen_at":"2026-11-02T20:35:33+00:00","fetched_at":"2026-11-02T20:35:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}