Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-4258

28
FAUCET Score

CVE-2026-4258 is a high-severity vulnerability (CVSS 7.5) affecting all versions of the sjcl package, stemming from improper cryptographic signature verification due to missing point-on-curve validation. This flaw allows an unauthenticated network attacker to recover a victim's ECDH private key by sending crafted public keys and observing ECDH outputs. The vulnerability has a high confidentiality impact, providing a plaintext oracle for private key recovery. While there is no public exploit code available and it is not currently listed on CISA KEV, it is on the Hot List, indicating significant attention and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.0.8CPE matchmatch criteria
cpe:2.3:a:bitwiseshiftleft:stanford_javascript_crypto_library:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 4.0

7.7HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
NONE
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
PROOF_OF_CONCEPT
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.25%
Probability of exploitation in next 30 days
EPSS Percentile
15.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0025 is in the 2nd percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: sjclFixed in: 1.0.9

Vendor Advisories (1)

npmGHSA-2w8x-224x-785mhigh

sjcl is missing point-on-curve validation in sjcl.ecc.basicKey.publicKey

Mar 17, 2026

References

gist.github.com / Kr0emer/2560f98edb10b0b34f2438cd63913c47
ExploitMitigationThird Party Advisory
github.com / bitwiseshiftleft/sjcl/blob/master/core/ecc.js%23L454-L461
Broken Link
github.com / bitwiseshiftleft/sjcl/commit/ee307459972442a17beebc29dc331fffd8aff796
Patch
security.snyk.io / vuln/SNYK-JS-SJCL-15369617
ExploitThird Party Advisory