CVE-2026-123867 Blast Radius

MEDIUM • CVSS 4.2A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorize…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-123867.

Book a Demo →← Back to CVE-2026-123867