CVE-2026-85393— node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
Quick assessment
Affected
digitalbazaar forge
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
node-forge 1.4.0 及以下版本在验证 RSA PKCS#1 v1.5 签名时，未能正确验证嵌套的 DigestAlgorithm 序列中的元素数量。攻击者可以在 DigestAlgorithm 序列中嵌入垃圾字节，从而利用小指数 RSA 密钥为任意消息伪造有效签名。这是针对 CVE-2026-33894 的不完整修复。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-MiddleAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| digitalbazaar | forge | ≤ 1.4.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85393
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
Source: CVE Program / CVE List V5
Vulnerability Description
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| digitalbazaar | forge | 0 ~ 1.4.0 | - |
|
II. Public POCs for CVE-2026-85393
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85393
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-85393 (2)
Other References for CVE-2026-85393 (1)
IV. Related Vulnerabilities
Same product: forge
-
CVE-2026-33896
Forge has a basicConstraints bypass in its certificate chain -
CVE-2026-33895
Forge has signature forgery in Ed25519 due to missing S > L -
CVE-2026-33894
Forge has signature forgery in RSA-PKCS due to ASN.1 extra f -
CVE-2026-33891
Forge has Denial of Service via Infinite Loop in BigInteger. -
CVE-2025-66030
node-forge ASN.1 OID Integer Truncation
Same vendor: digitalbazaar
-
CVE-2026-33896
Forge has a basicConstraints bypass in its certificate chain -
CVE-2026-33895
Forge has signature forgery in Ed25519 due to missing S > L -
CVE-2026-33894
Forge has signature forgery in RSA-PKCS due to ASN.1 extra f -
CVE-2026-33891
Forge has Denial of Service via Infinite Loop in BigInteger. -
CVE-2025-66030
node-forge ASN.1 OID Integer Truncation
Same weakness: CWE-347
-
CVE-2026-80098
Copilot Studio Elevation of Privilege Vulnerability -
CVE-2026-84185
Jwcrypto: jwcrypto: general json jws kid binding bypass duri -
CVE-2026-85394
python-jose through 3.5.0 Algorithm Confusion via DER-encode -
CVE-2026-80465
Mendix SAML低版本SAML签名验证缺陷 -
CVE-2026-82876
Phison PS3111-S11 Controller Firmware Signature Verification
V. Comments for CVE-2026-85393
No comments yet