CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-107700 — dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allo...

·Source: NIST NVD

Updated:

Executive Summary

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process.

Analysis

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatenated into a new Function body in index.js, so attackers can reach constructor.constructor to load child_process and run operating system commands in the Node.js process. CVSS Score: 9.8. Published: 2026-10-08T19:17:02.213.

Indicators of Compromise (1)

CVE (1)
CVE-2026-107700
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window

[object Object]

CVE-2026-109618CVE-2026-109619
r/netsec
LOWVulnerability

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security