CVE-2026-106072 | Node.js up to 22.23.3/24.22.0/26.12.0 TLS Hostname Verification tls.checkServerIdentity certificate validation

October 23, 2026 Yanac

A vulnerability was found in Node.js up to 22.23.3/24.22.0/26.12.0. It has been classified as problematic. Affected by this vulnerability is the function tls.checkServerIdentity of the component TLS Hostname Verification. Performing a manipulation results in improper certificate validation.

This vulnerability is reported as CVE-2026-106072. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More