CVE-2026-2359

🗓️ 27 Feb 2026 15:42:08Reported by openjsType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 48 Views

CVE-2026-2359: Multer before 2.1.0 DoS via dropping connections during upload; upgrade to 2.1.0.

Reporter	Title	Published	Views	Family All 33
ibm	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	7 May 202612:35	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in multer-2.0.2.tgz	28 Apr 202619:28	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js module Multer (CVE-2026-2359, CVE-2026-3304 & CVE-2026-3520)	27 Mar 202617:32	–	ibm
ibm	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerabilities in multer-2.0.2.tgz	7 May 202619:43	–	ibm
ibm	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	27 Mar 202616:53	–	ibm
ibm	Security Bulletin: IBM Application Modernization Accelerator is vulnerable to multiple vulnerabilities found in Node.js	16 Apr 202615:15	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Watsonx BI Assistant for CP4D	26 Jun 202620:23	–	ibm
ibm	Security Bulletin: Vulnerability in node.js affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:16	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	2 Jun 202608:49	–	ibm
ibm	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Node.js	16 Apr 202615:15	–	ibm

NVD

Node

expressjs multerRange<2.1.0node.js

[
  {
    "defaultStatus": "unaffected",
    "packageURL": "pkg:npm/multer",
    "product": "multer",
    "vendor": "expressjs",
    "versions": [
      {
        "lessThan": "2.1.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cve	www.cve.org/CVERecord
cna	www.cna.openjsf.org/security-advisories.html
github	www.github.com/expressjs/multer/commit/cccf0fe0e64150c4f42ccf6654165c0d66b9adab
github	www.github.com/expressjs/multer/security/advisories/GHSA-v52c-386h-88mc
access	www.access.redhat.com/errata/RHSA-2026:6174
access	www.access.redhat.com/security/cve/CVE-2026-2359
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/errata/RHSA-2026:6802
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2359.json

15 Jul 2026 02:19Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

CVSS 48.7

EPSS0.00663

SSVC

CWE-772