CVE-2006-1116: Ncipher Ncore

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.

Affected products

• Ncipher Ncore: version 2.17 only

Published 2006-03-09. Last modified 2026-06-16.