Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-119186— Forge: AES-GCM authentication bypass via unvalidated tagLength option

Quick assessment

Affected
digitalbazaar forge
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Forge（也称为 node-forge）是一个用 JavaScript 原生实现的传输层安全（TLS）库。在 1.4.1 版本之前，node-forge 在通过 创建解密器并调用 进行解密时，未对传入的 AES-GCM 选项进行验证。当应用程序从接收到的数据中推导 ，或使用了未设置、类零（zero-like）的配置文件值时，若该值被转换为 0 且认证标签为空或缺失，则会导致计算出的标签与提供的标签均被视为空，从而使得 接受未经认证的密文。如果应用程序省略 以使用默认的 128 位长度，或传入一个固定的有效标签长度

CVSS 5.9 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
digitalbazaar forge < 1.4.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-119186

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Forge: AES-GCM authentication bypass via unvalidated tagLength option
Source: CVE Program / CVE List V5
Vulnerability Description
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start() during decryption through forge.cipher.createDecipher(). When an application derived tagLength from received data or used an unset or zero-like configuration value, a value that converted to zero together with an empty or missing authentication tag caused the calculated and supplied tags to compare as empty, so decipher.finish() accepted unauthenticated ciphertext. Applications that omit tagLength to use the 128-bit default or pass a fixed valid tag length are unaffected. This issue is fixed in version 1.4.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
完整性检查值验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
digitalbazaar forge < 1.4.1 -

II. Public POCs for CVE-2026-119186

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-119186

请登录查看更多情报信息。

Other References for CVE-2026-119186 (3)

Same Patch Batch · digitalbazaar · 2026-10-29 · 15 CVEs total

CVE-2026-118779 7.5 HIGH Forge: Regular expression denial of service in PEM decoding (pem.decode)
CVE-2026-118782 7.5 HIGH Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
CVE-2026-119188 7.5 HIGH Forge: Denial of service in TLS record processing via a record interleaved with a fragment
CVE-2026-119191 7.5 HIGH Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
CVE-2026-119187 7.5 HIGH Forge: Denial of service in TLS record processing via call stack exhaustion
CVE-2026-119190 7.4 HIGH Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension
CVE-2026-118778 5.9 MEDIUM Forge: TLS client crash when the server sends no certificate
CVE-2026-119189 5.9 MEDIUM Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificate
CVE-2026-118777 4.8 MEDIUM Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
CVE-2026-118774 3.7 LOW Forge: Certificate signature verified with the issuer's RSA signature scheme
CVE-2026-118780 3.7 LOW Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from
CVE-2026-118775 3.7 LOW Forge: ASN.1 OID first arc truncation in asn1.oidToDer
CVE-2026-118776 3.7 LOW Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
CVE-2026-118781 2.9 LOW Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input

IV. Related Vulnerabilities

Same product: forge
Same vendor: digitalbazaar
Same weakness: CWE-354