CVE-2026-82853 | Nodemailer up to 8.0.4 Transport Name Option command injection

August 31, 2026 Yanac

A vulnerability classified as problematic has been found in Nodemailer up to 8.0.4. This impacts an unknown function of the component Transport Name Option. Performing a manipulation of the argument Name results in command injection.

This vulnerability was named CVE-2026-82853. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More