THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-4600 (HIGH 7.4) — Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signat

[NVD] CVE-2026-4600 (HIGH 7.4) — Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signat

lownvdPublished 2026-03-23

CVE-2026-4600 CVSS: 7.4 HIGH Published: 2026-03-23T06:16:21.697

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature()

Indicators of compromise

CVE-2026-4600cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-4600