CVE-2026-4047

CVE Enrichment

CISA KEV: Not listed

Last enrichment sync: 04-Nov-2026 19:40
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

The flaws, tracked as CVE-2026-3965 and CVE-2026-4047, allow unauthenticated remote code execution by exploiting discrepancies in how the system handles URL rewriting and case-sensitive path matching. SecurityWeek Roundup Covers Scattered Spider Arrest, ADT Data Leak and Security Advisories
The issues (CVE-2026-3965 and CVE-2026-4047) stem from a mismatch between middleware authorization and Express.js routing and were effectively fixed in PR #2941 after an initial insufficient mitigation; Hackers Exploit Qinglong Authentication Bypasses to Deploy Cryptominers

CVE (2)

Threat Actors (5)

MITRE ATT&CK (5)

Vendors (4)

Products (6)

Industries (3)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.