CVE-2026-14570
CWE-330Published: July 5, 2026· Updated: Jul 5, 2026
Official Description
Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery.
"Crypt::DSA::Util::makerandom forces the high bit of every value it returns to obtain an exactly N-bit integer for prime search. The signing nonce and the private key are drawn from makerandom. Because the high bit is always set, the result is not uniform: its top bit is fixed, producing insecure values."
An attacker who collects a modest number of signatures under an affected key, together with the public key, can recover the private key with a lattice attack.
Keys used to sign with an affected version should be considered compromised and new keys should be generated.
Technical Analysis
CVE-2026-14570 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
Exploit & PoC Resources
All References (4)
Quick Facts
Related CVEs (CWE-330)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-14570 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts