CVE-2026-56850 in Node.jsinformazioni

Riassunto

di MITRE • 30/07/2026

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.

This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsabile

Hackerone

Prenotare

23/06/2026

Divulgazione

30/07/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

Want to know what is going to be exploited?

We predict KEV entries!