CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery Published April 30, 2026 Information published.