Threats Tagged 'cve-2026-23965'
View all threats tagged with 'cve-2026-23965'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-23965'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-23965 is a high-severity vulnerability in the sm-crypto JavaScript library implementing Chinese cryptographic algorithms SM2, SM3, and SM4. The flaw lies in the SM2 signature verification logic prior to version 0.4.0, allowing attackers to forge valid signatures for arbitrary public keys without authentication or user interaction. This signature forgery can be exploited when the message space has sufficient redundancy, enabling attackers to craft messages with fixed prefixes that satisfy verification requirements. The vulnerability impacts the integrity of cryptographic operations, potentially allowing unauthorized actions or data tampering. No known exploits are currently reported in the wild. The issue is patched in sm-crypto version 0.4.0. Join the discussion | CVE Database V5 | 01/22/2026, 02:05:43 UTC Added: 01/22/2026, 02:50:57 UTC |
Showing 1 to 1 of 1 result