CVE
CVE-2026-123864
Vendor / Product unavailable
- First Reported
- Nov 12, 2026
- Latest Reported
- Nov 12, 2026
Reported Context (1)
- A separate flaw in Node.js HTTPS servers, CVE-2026-123864, can allow an unauthenticated client to read memory from other connections, "including TLS private keys and other users' requests," the project says. It affects Node.js Fixes HTTP/2 and HTTPS Flaws That Can Crash Servers or Leak Memory
CVE (2)
People (1)
Products (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
