{"id":"CVE-2026-85393","published":"2026-09-03T18:54:25Z","modified":"2026-09-03T19:14:06Z","title":"node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding","vendor":"digitalbazaar","product":"forge","tier":"tail","description":{"text":"node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00326,"percentile":0.25614,"provenance":"source"},"cwes":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature"}],"references":[{"url":"https://github.com/digitalbazaar/forge/issues/1149","tags":["issue-tracking"]},{"url":"https://github.com/digitalbazaar/forge","tags":["product"]},{"url":"https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js","tags":["technical-description"]},{"url":"https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js","tags":["technical-description"]},{"url":"https://github.com/advisories/GHSA-ppp5-5v6c-4jwp","tags":["related"]},{"url":"https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding","tags":["third-party-advisory"]}],"priority":{"score":10.4,"factors":[{"name":"EPSS percentile","points":5.12},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"digitalbazaar","affectedVersions":[{"vendor":"digitalbazaar","product":"forge","versions":["<= 1.4.0"]}],"affected":[{"ecosystem":"npm","package":"node-forge","vulnerableRanges":["<=1.4.0"],"patched":[],"from":["GHSA-86w9-cpqp-85rv"],"provenance":"source"}],"euvd":{"id":"EUVD-2026-70670","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-digitalbazaar-forge-cve-2022-24771","parents":[{"from":"CVE-2022-24771","to":"CVE-2026-85393","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"osv-related","provenance":"source","id":"GHSA-ppp5-5v6c-4jwp","via":"reference","url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-cfm4-qjh2-4765"}]},{"from":"CVE-2026-33894","to":"CVE-2026-85393","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This is an incomplete fix for CVE-2026-33894.","from":"CVE.org","in":"CVE-2026-85393"},{"kind":"osv-related","provenance":"source","id":"GHSA-ppp5-5v6c-4jwp","via":"reference","url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"},{"kind":"osv-related","provenance":"source","id":"GHSA-86w9-cpqp-85rv","via":"reference","url":"https://github.com/advisories/GHSA-ppp5-5v6c-4jwp"}]}]}}