CVE-2026-119186 | Digitalbazaar Forge up to 1.4.0 AES-GCM forge.cipher.createDecipher tagLength data authenticity

October 29, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Digitalbazaar Forge up to 1.4.0. This affects the function forge.cipher.createDecipher of the component AES-GCM. Such manipulation of the argument tagLength leads to insufficient verification of data authenticity.

This vulnerability is listed as CVE-2026-119186. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More