CWE-208: Observable Timing Discrepancy
Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
171 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-23519 — RustCrypto cmov: thumbv6m-none-eabi compiler emits non-constant time assembly when using cmovnz
- CVE-2024-47178 — basic-auth-connect's callback uses time unsafe string comparison
- CVE-2025-53940 — Quiet uses insecure, inconsistent verification on local backend token
- CVE-2026-28464 — OpenClaw < 2026.2.12 - Timing Attack in Hooks Token Authentication
- CVE-2026-3337 — Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
- CVE-2026-41588 — RELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key()
- CVE-2025-68621 — Trilium Notes has a Timing Attack Vulnerability in /api/login/sync
- CVE-2024-23342 — python-ecdsa vulnerable to Minerva attack on P-256
- CVE-2026-72700 — Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
- CVE-2026-32702 — Cleanuparr has Username Enumeration via Timing Attack
- CVE-2026-16731 — Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout
- CVE-2025-48995 — SignXML's signature verification with HMAC is vulnerable to a timing attack
- CVE-2025-43754 — Username enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 through 2024.Q4.
- CVE-2025-0693 — Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration
- CVE-2026-54736 — Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)
- CVE-2026-47783 — In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a
- CVE-2026-15432 — Observable Timing Discrepancy in Tink-Java and Tink-Android ChunkedMacVerification
- CVE-2024-14041 — ML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)
- CVE-2026-69247 — cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
- CVE-2026-32935 — phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
Recently published
- CVE-2026-87737 — An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST
- CVE-2026-16037 — Callback Authentication Bypass via Timing Attack in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-81159 — Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106
- CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
- CVE-2026-82449 — Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
- CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
- CVE-2026-78500 — Dimension Blind SSRF via Database Test Connection Feature
- CVE-2026-80199 — Kimai before 2.54.0 Username Enumeration via Timing Oracle
- CVE-2026-18259 — Token Content Access - Moderately critical - Access bypass - SA-CONTRIB-2026-090
- CVE-2026-72701 — Grav CMS before 2.0.16 Timing Attack via verifyNonce
- CVE-2026-72700 — Grav before 3.9.1 Timing Attack via Non-Constant-Time Token Comparison
- CVE-2026-53525 — WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication
- CVE-2026-44255 — Wazuh: Username Enumeration via Timing Side-Channel
- CVE-2026-75589 — Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify
- CVE-2026-16458 — Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto
- CVE-2026-16459 — Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto
- CVE-2026-43606 — Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local acce
- CVE-2025-49506 — Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack
- CVE-2026-16731 — Authentication and authorization bypass via cryptographic timing side-channel attack in StationScout
- CVE-2026-16315 — Authentication and authorization bypass via cryptographic timing side-channel attack in StationGuard
More specific weaknesses
- CWE-1254 — Incorrect Comparison Logic Granularity