{"id":"CVE-2026-59586","kind":"vulnerability","aliases":["CVE-2026-59586"],"related":[],"title":"Unnamed component: crypto flaw lets local users recover keys and forge tags","description":"In multiple locations, there is a possible way to recover cryptographic keys and forge authentication tags due to improperly used crypto. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"Improperly used cryptography in several places lets a local process recover cryptographic keys and forge authentication tags. An attacker who can run code on the machine gets information disclosure without extra privileges.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T20:19:29+00:00","first_seen_at":"2026-11-10T20:46:13+00:00","triaged_at":"2026-11-10T20:49:57+00:00","updated_at":"2026-11-10T20:49:57+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T20:49:57Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Unnamed component: crypto flaw lets local users recover keys and forge tags","impact":"high","summary":"Improperly used cryptography in several places lets a local process recover cryptographic keys and forge authentication tags. An attacker who can run code on the machine gets information disclosure without extra privileges.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"local code recovers keys and forges authentication tags","analyst_note":"Identify the affected product from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-59586 and find the fixed versions and any vendor advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000637,"input_tokens":4520,"output_tokens":370,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-59586':15A,18A 'addit':81C 'attack':37B 'authent':34B,65C 'code':41B 'compon':2A 'could':73C 'crypto':3A,71C 'cryptograph':30B,61C 'cryptographi':21B 'cve':13A,16A 'disclosur':47B,78C 'due':67C 'execut':82C 'exploit':91C 'extra':49B 'flaw':4A 'forg':11A,33B,64C 'get':45B 'improp':19B,69C 'inform':46B,77C 'interact':86C 'key':9A,31B,62C 'lead':74C 'let':5A,25B 'local':6A,27B,76C 'locat':53C 'machin':44B 'multipl':52C 'need':84C,89C 'place':24B 'possibl':57C 'privileg':50B,83C 'process':28B 'recov':8A,29B,60C 'run':40B 'sever':23B 'tag':12A,35B,66C 'unnam':1A 'use':20B,70C 'user':7A,85C 'way':58C 'without':48B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"campaign_type":null,"search_a":"'-2026':14A,17A '-59586':15A,18A 'compon':2A 'crypto':3A 'cve':13A,16A 'flaw':4A 'forg':11A 'key':9A 'let':5A 'local':6A 'recov':8A 'tag':12A 'unnam':1A 'user':7A","search_b":"'attack':37B 'authent':34B 'code':41B 'cryptograph':30B 'cryptographi':21B 'disclosur':47B 'extra':49B 'forg':33B 'get':45B 'improp':19B 'inform':46B 'key':31B 'let':25B 'local':27B 'machin':44B 'place':24B 'privileg':50B 'process':28B 'recov':29B 'run':40B 'sever':23B 'tag':35B 'use':20B 'without':48B","search_c":"'addit':81C 'authent':65C 'could':73C 'crypto':71C 'cryptograph':61C 'disclosur':78C 'due':67C 'execut':82C 'exploit':91C 'forg':64C 'improp':69C 'inform':77C 'interact':86C 'key':62C 'lead':74C 'local':76C 'locat':53C 'multipl':52C 'need':84C,89C 'possibl':57C 'privileg':83C 'recov':60C 'tag':66C 'use':70C 'user':85C 'way':58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T20:19:29+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-59586","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59586","severity":null,"published_at":"2026-11-10T20:19:29+00:00","modified_at":"2026-11-10T20:19:29+00:00","first_seen_at":"2026-11-10T20:46:13+00:00","fetched_at":"2026-11-10T20:46:13+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}