Is CVE-2026-87735 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-87735?

CVE-2026-87735 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-87735

Description

An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption.