CVE-2026-118778 | DigitalBazaar Forge up to 1.4.0 TLS Client forge.tls.createConnection null pointer dereference

October 29, 2026 Yanac

A vulnerability categorized as problematic has been discovered in DigitalBazaar Forge up to 1.4.0. Impacted is the function forge.tls.createConnection of the component TLS Client. The manipulation results in null pointer dereference.

This vulnerability is known as CVE-2026-118778. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More