Search: CVE-2026-48928

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.2	EPSS 0.2%	CVE-2026-48928nodejs node · Improper Access Control – Generic Medium4.2EPSS 0.2%2026-06-26CVE Database V5CVE-2026-48928 A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26. EPSS 0.2%Vulnerability CWE-284	CVE Database V5	2026-06-26

Page 1 of 1 · 1 duplicate CVE record merged