CVE-2026-85393 node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
Attackers can forge valid RSA signatures for arbitrary messages by exploiting improper validation of nested DigestAlgorithm sequences in node-forge.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-85393?
CVE-2026-85393 is a high-severity vulnerability in digitalbazaar forge, published on 3 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.
Weakness: CWE-347
Which versions are affected by CVE-2026-85393?
How do I fix CVE-2026-85393?
Upgrade to a fixed version.
Is CVE-2026-85393 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-85393 exists.
Sources
Also known as AZL-99750, MINI-2v6p-x52f-g3m9, MINI-4g24-6gwm-c42v, MINI-5f3p-mwxj-q6hf, MINI-73j9-g2gw-mg37, MINI-7vm4-hx97-j5r2 and 15 more.