CVE-2026-82660 | Nodemailer up to 8.0.8 jsonTransport path/href access control

A vulnerability was found in Nodemailer up to 8.0.8. It has been classified as critical. This issue affects some unknown processing of the component jsonTransport. Performing a manipulation of the argument path/href results in improper access controls.

This vulnerability is cataloged as CVE-2026-82660. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More