CVE-2026-63640 | MagicMirrorOrg MagicMirror up to 2.36.x Socket Dispatcher js/node_helper.js socketNotificationReceived information disclosure

A vulnerability was found in MagicMirrorOrg MagicMirror up to 2.36.x. It has been classified as problematic. Affected by this issue is the function socketNotificationReceived of the file js/node_helper.js of the component Socket Dispatcher. The manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-63640. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More