CVE-2026-123867 | OpenJS Foundation Node.js up to 22.23.4/24.22.2/26.13.0 TLS Authorization src/crypto/crypto_tls.cc CertCbDone authorization

A vulnerability, which was classified as critical, was found in OpenJS Foundation Node.js up to 22.23.4/24.22.2/26.13.0. The impacted element is the function CertCbDone of the file src/crypto/crypto_tls.cc of the component TLS Authorization. The manipulation results in authorization bypass.

This vulnerability was named CVE-2026-123867. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More