#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post
CVE-2026-118774: CVE-2026-118774: Improper Verification of Cryptographic Signature in node-forge X.509 Certificate Validation
📰

CVE-2026-118774: CVE-2026-118774: Improper Verification of Cryptographic Signature in node-forge X.509 Certificate Validation

DEV Community: cybersecurity·CVE Reports·about 2 hours ago
#VwvdGDui
#devtocybersecurity#devto#dev#certificate#signature
Reading 0:00
15s threshold

CVE-2026-118774: Improper Verification of Cryptographic Signature in node-forge X.509 Certificate Validation

Vulnerability ID: CVE-2026-118774

CVSS Score: 3.7

Published: 2026-11-10

CVE-2026-118774 (GHSA-9wg5-mj3p-v49q) is an improper cryptographic signature verification vulnerability (CWE-347) in node-forge versions prior to 1.4.1. When verifying an X.509 subordinate certificate via certificate.verify(child) or verifyCertificateChain(), the library erroneously selects the RSA padding scheme (e.g., PKCS#1 v1.5 vs. RSASSA-PSS) and RSASSA-PSS parameters from the issuer certificate rather than from the child certificate being verified.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Create free accountLog in