CWE-514— Covert Channel
A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.— MITRE CWE catalog
2 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-514page 1 of 1
- CVE-2026-106582LOWCVSS 3.7EG 3.72026-10-06
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings.
- CVE-2026-42768LOWCVSS 3.7EG 3.72026-06-09
Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/or decryption output. Impact summary: T…
Map vulnerabilities like CWE-514 to your infrastructure
EchelonGraph correlates every CVE — across CWE-514 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →