Search: CVE-2026-48930

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.6	EPSS 0.3%	CVE-2026-48930nodejs node · Improper Access Control – Generic Medium5.6EPSS 0.3%2026-06-26CVE Database V5CVE-2026-48930 A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26. EPSS 0.3%Vulnerability CWE-284	CVE Database V5	2026-06-26

Page 1 of 1 · 1 duplicate CVE record merged