CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-48930 — A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lea...

·Source: NIST NVD

Updated:

Executive Summary

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

Analysis

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**. CVSS Score: 9.8. Published: 2026-06-26T02:16:52.723.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48930
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 26, 2026. Verified by: NIST.

Related Threats

LOWVulnerability

Supreme Court decision threatens EU-US data transfer agreement

In a Tuesday letter, Max Schrems, the founder of the Vienna-based privacy advocacy organization noyb, told European officials he plans to sue to invalidate the EU-U.S. Data Privacy Framework (DPF) that allows for the transfer of personal data from the EU to U.S. companies.

The Record
CRITICALVulnerability

NVD CRITICAL: CVE-2026-58455 — Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulne...

Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject

CVE-2026-58455
NIST NVD
MEDIUMVulnerability

Scattered Spider Suspect Extradited From Finland to US

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/scattered-spider-suspect-extradited-from-finland-to-us-image_small-10-a-32140.jpg" align=right hspace=4><b>FBI Says Peter Stokes, 19, 'Exhibited Substantial Wealth for a Person of His Age'</b><br>A suspected member of the notorious Scattered Spider cybercrime group has been extradited from Finland to stand trial in the United Stat

Bank Info Security