CVE-2026-87018 | OpenJS Foundation undici up to 6.29.0/7.30.0/8.12.1 Established-Socket Error certificate validation

October 15, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in OpenJS Foundation undici up to 6.29.0/7.30.0/8.12.1. Impacted is an unknown function of the component Established-Socket Error Handler. This manipulation causes improper certificate validation.

The identification of this vulnerability is CVE-2026-87018. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More