Search: CVE-2026-63074

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.9	EPSS 0.6%	CVE-2026-63074Issue summary · The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never Medium5.9EPSS 0.6%2026-08-25GCVE DatabaseCVE-2026-63074 A vulnerability in Node.js related to the OpenSSL Certificate Management Protocol (CMP) causes the caching of additional certificates (extraCerts) sent in a CMP message, but these certificates are never properly handled. This issue has a CVSS score of 5.9 and is classified as low severity. Multiple specific Node.js versions, primarily Ubuntu package versions, are affected. A patch is available to address this vulnerability. EPSS 0.6%Vulnerability CWE-770 #microsoft-security-response-ce	GCVE Database	2026-08-25

Page 1 of 1