CVE-2026-56850 in Node.jsinformación

Resumen

por MITRE • 2026-07-30

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.

This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsable

Hackerone

Reservar

2026-06-23

Divulgación

2026-07-30

Moderación

aceptado

Artículo

VDB-384627

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Do you need the next level of professionalism?

Upgrade your account now!