Critical severity · published Mar 23, 2026
CVE-2026-4600
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in…
9.1
CVSS
0.4%
EPSS
No
On KEV
Description
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
jsrsasign ·
before 11.1.1 · source: vendor, NVD
OR
org.webjars.npm:jsrsasign ·
0 · source: vendor
MT
Migration Toolkit for Virtualization 2.1 · Red Hat
All versions, or not specified · source: CISA
MT
Migration Toolkit for Virtualization 2.9 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Quay 3.10 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Quay 3.12 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Quay 3.15 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Quay 3.16 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Quay 3.9 · Red Hat
All versions, or not specified · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4600
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4600
Exploit
https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7
Patch
https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60
Issue Tracking
https://github.com/kjur/jsrsasign/pull/646
security.snyk.io
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15812268
Third Party Advisory
https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:19375
More from jsrsasign
9.1
CVE-2026-4601
Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation
9.1
CVE-2026-4599
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and…
7.5
CVE-2026-4598
Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation…
7.5
CVE-2026-4602
Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js
5.3
CVE-2026-4603
Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt…