CVE-2026-126051 | OpenJS Foundation Node.js up to 24.22.2/26.13.0 TLS Server Handshake server.addContext cross-domain policy

November 11, 2026 Yanac

A vulnerability marked as problematic has been reported in OpenJS Foundation Node.js up to 24.22.2/26.13.0. Impacted is the function server.addContext of the component TLS Server Handshake. Performing a manipulation results in permissive cross-domain policy with untrusted domains.

This vulnerability is reported as CVE-2026-126051. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More