Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.js. An attacker can force RSA public-key operations (e.g., verify and encryption) to collapse to deterministic zero outputs and hide “invalid key” errors by supplying a JWK whose modulus decodes to zero.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚡ New CVE Alert: CVE-2026-4603 📊 Severity: 5.9 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4603 #CVE-2026-4603 #CVE #Medium #CyberSecurity #InfoSec https://t.co/Yx6KXZ7asQ
Post summary
The tweet announces the new CVE-2026-4603, notes its medium severity (5.9), and supplies a link to the NVD entry for further details.
CVE-2026-4603 Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowI… https://www.cve.org/CVERecord?id=CVE-2026-4603
Post summary
The text announces CVE‑2026‑4603, detailing a division‑by‑zero flaw in jsrsasign <11.1.1 affecting RSASetPublic/KEYUTIL parsing and BigInteger.modPowI.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kjur | jsrsasign | - | node.js | - |