CVE-2026-106069 | Node.js prior 22.23.3/24.22.0/26.12.0 Hostname Verification tls.checkServerIdentity certificate validation

October 23, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Node.js. The impacted element is the function tls.checkServerIdentity of the component Hostname Verification. The manipulation leads to improper certificate validation.

This vulnerability is listed as CVE-2026-106069. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More