CVE-2026-6837-zyxel-export-cgi-command-injection

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection This repository packages the public writeup, quick verification script, and supporting evidence for CVE-2026-6837. What this is CVE-2026-6837 is a post-authentication command-injection flaw in Zyxel's export-cgi handler. On the...

npm: Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

npm: Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113341

Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count...

go-pkcs12

package pkcs12 import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which do not suppo...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Found this stack buffer overflow like a year ago, turned out to be a duplicate CVE-2025-11187 issue occurs in libcrypto's PKCS PBMAC1 handling when PBKDF2's keylength is attacker-controlled, It causes a write past ...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...

pki-toolbox

pki-toolbox A self-hosted, 100 % client-side toolbox for PKI artefacts : X.509 certificates, PKCS10 CSRs, chains, CRLs, PKCS7 and PKCS12 bundles, raw ASN.1, format conversion, fingerprints and certificate issuance. A privacy-respecting, self-hostable replacement for online certificate decoders...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782 Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782

The Forge (node-forge) JavaScript library, prior to version 1.4.1 , is vulnerable to a flaw where it accepts a PKCS#12 MAC or password-based encryption iteration count of zero or less. This causes pki.pbe.generatePkcs12Key() to return a constant key regardless of the provided password and salt. C...

CVE-2026-118782 Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

Security Bulletin: IBM MQ is affected by multiple vulnerabilities in Bouncy Castle for Java

Summary IBM MQ has addressed multiple vulnerabilities in Bouncy Castle for Java Vulnerability Details CVEID:CVE-2026-12802 DESCRIPTION: In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before...

PT-2026-132796

Name of the Vulnerable Software and Affected Versions Forge versions prior to 1.4.1 Description Forge also known as node-forge accepts a PKCS12 MAC or password-based encryption iteration count of zero or less. This causes the pki.pbe.generatePkcs12Key function to return a constant key that does n...

CVE-2026-118782: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

Oracle Java SE 27.0.1 eMudhra Certificate Detector

A Python tool that audits Java JKS and PKCS12 trust stores and PEM bundles for eMudhra-related certificate indicators associated with CVE-2026-91403...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-12802...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. There is an “off-by-one” error in the bounds check for the PKCS12 bag element. This vulnerability allows a remote attacker to write beyond the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could le...

CVE-2026-97873

A flaw was found in Bouncy Castle. In its legacy password-based encryption implementations, iteration counts parsed from untrusted cryptographic inputs are processed without enforcing an upper limit. A remote attacker could exploit this vulnerability by supplying crafted parameters with an...