2 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-85393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed...
8.7CVSS6.1AI score0.00446EPSS
SaveExploits0References2
CVE-2026-85393
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...
8.7CVSS6AI score0.00326EPSS
SaveExploits0References7
20