CVE-2026-112362 | Fastify express up to 4.0.8 @fastify/express improper authorization

October 27, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Fastify express up to 4.0.8. The affected element is an unknown function of the component @fastify/express. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-112362. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More