CVE-2026-17578
CVE-2026-17578 is a low-severity vulnerability with a CVSS 4.0 base score of 2.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-323.
Key facts
- Severity: Low (CVSS 4.0 base score 2.3)
- EPSS exploit prediction: 0% (5th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-323
- Published:
- Last modified:
Description
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached.
Frequently asked questions
- What is CVE-2026-17578?
- Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained high rate without key rotation, which only occurs on reboot of the Kong Event Gateway instance, the probability of a nonce collision becomes non-negligible. An authorized consumer who detects a nonce collision can recover parts of plaintext from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic key rotation before the recommended usage limit is reached.
- How severe is CVE-2026-17578?
- CVE-2026-17578 has a CVSS 4.0 base score of 2.3, rated low severity.
- Is CVE-2026-17578 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2026-17578?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2026-17578 published?
- CVE-2026-17578 was published on 2026-08-05.
References
Other CWE-323 vulnerabilities
- CVE-2026-59099 — Critical (CVSS 9.1): Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers…
- CVE-2026-12205 — Critical (CVSS 9.1): Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key…
- CVE-2026-49952 — Critical (CVSS 9.1): Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows…
- CVE-2025-64767 — Critical (CVSS 9.1): hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5,…
- CVE-2025-47345 — High (CVSS 8.4): Cryptographic issue may occur while encrypting license data.
- CVE-2026-3559 — High (CVSS 8.1): Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability…