CVE detail
CVE-2026-33894
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures by stuffing “garbage” bytes within the ASN structure in order to construct a signature that passes verification, enabling Bleichenbacher style forgery. This issue is similar to CVE-2022-24771, but adds bytes in an addition field within the ASN structure, rather than outside of it. Additionally, forge does not validate that signatures include a minimum of 8 bytes of padding as defined by the specification, providing attackers additional space to construct Bleichenbacher forgeries. Version 1.4.0 patches the issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 1
- within the 30d window
- Peak daily
- 1
- highest bucket
Evidence
Source links by recency
19 source links · newest first
- ⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and MoreThe Hacker News
on a standard WordPress installation, without requiring any plugins or other special conditions. It is a combination of CVE-2026-63030 (REST API batch-route confusion) and CVE-2026-60137 (SQL injection in WordPress core) that can be chained to turn an anonymous request into code execution. watchTowr said it's already seeing proof-of-concept (PoC) explo
newsthehackernews.comJul 20, 2026, 1:32 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33894.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 27, 2026, 9:17 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2452464bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/security/cve/CVE-2026-33894access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:9742access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:34342access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:24853access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:24761access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:23361access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:22840access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:22629access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:22465access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:21017access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:19375access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://access.redhat.com/errata/RHSA-2026:13826access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 27, 2026, 9:17 PM - https://www.rfc-editor.org/rfc/rfc8017.htmlwww.rfc-editor.org
No excerpt available.
Third Party Advisorywww.rfc-editor.orgMar 27, 2026, 9:17 PM - https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QEmailarchive.ietf.org
No excerpt available.
Third Party Advisorymailarchive.ietf.orgMar 27, 2026, 9:17 PM No excerpt available.
Exploitgithub.comMar 27, 2026, 9:17 PM- https://datatracker.ietf.org/doc/html/rfc2313#section-8datatracker.ietf.org
No excerpt available.
Exploitdatatracker.ietf.orgMar 27, 2026, 9:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-47201CVSS 8.5 · High
authentik is an open-source identity provider. Prior to versions 2025.12.5, 2026.2.3, and 2026.5.1, authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping wh…
- CVE-2026-6328CVSS 8.3 · High
Improper input validation, Improper verification of cryptographic signature vulnerability in XQUIC Project XQUIC xquic on Linux (QUIC protocol implementation, packet processing mo…
- CVE-2023-28113CVSS 5.9 · Medium
russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to…
- CVE-2022-31172CVSS 7.5 · High
OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable to the SignatureChecker reverting. `SignatureChecker.isValidSignature…
- CVE-2020-35169CVSS 9.1 · Critical
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
- CVE-2020-8324CVSS 5.0 · Medium
A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed.