CVE-2026-33894 | digitalbazaar forge 1.3.2 RSA-PKCS signature verification

VDB-353825 · CVE-2026-33894 · GCVE-0-2026-33894 DIGITALBAZAAR FORGE 1.3.2 RSA-PKCS SIGNATURE VERIFICATION HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.6 $0-$5k 3.39+ Summaryinfo A vulnerability has been found in digitalbazaar forge and classified as problematic. Affected is an unknown function of the component RSA-PKCS. The manipulation leads to signature verification. This vulnerability is referenced as CVE-2026-33894. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded. Detailsinfo A vulnerability was found in digitalbazaar forge. It has been rated as problematic. This issue affects an unknown part of the component RSA-PKCS. The manipulation with an unknown input leads to a signature verification vulnerability. Using CWE to declare the problem leads to CWE-347. The product does not verify, or incorrectly verifies, the cryptographic signature for data. Impacted is integrity. The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-33894. The exploitation is known to be difficult. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. Upgrading to version 1.4.0 eliminates this vulnerability. Productinfo Vendor digitalbazaar Name forge Version 1.3.2 CPE 2.3info 🔒 CPE 2.2info 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv3info VulDB Meta Base Score: 3.7 VulDB Meta Temp Score: 3.6 VulDB Base Score: 3.7 VulDB Temp Score: 3.6 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Signature verification CWE: CWE-347 / CWE-345 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Yes Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: forge 1.4.0 Timelineinfo 03/27/2026 Advisory disclosed 03/27/2026 +0 days VulDB entry created 03/27/2026 +0 days VulDB entry last update Sourcesinfo Advisory: github.com Status: Confirmed CVE: CVE-2026-33894 (🔒) GCVE (CVE): GCVE-0-2026-33894 GCVE (VulDB): GCVE-100-353825 Entryinfo Created: 03/27/2026 07:33 Changes: 03/27/2026 07:33 (51) Complete: 🔍 Cache ID: 99:15A:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸