THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4598 (HIGH 7.5) — Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such cra

[NVD] CVE-2026-4598 (HIGH 7.5) — Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such cra

lownvdPublished 2026-03-23

CVE-2026-4598 CVSS: 7.5 HIGH Published: 2026-03-23T06:16:21.300

Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m

Indicators of compromise

CVE-2026-4598cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4598