CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

UBUNTU-CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-123867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. Whe...

CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

DEBIAN-CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

ALPINE-CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

CVE-2026-123867 Node.js is vulnerable to a per-host mTLS authorization bypass via a CA-only SNI context failing open to the default CA

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

EUVD-2026-123689

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

CVE-2026-123867

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...

CVE-2026-123867

Node.js versions 26.x, 24.x, and 22.x are vulnerable to a per-host mTLS authorization bypass . The root cause is located in src/crypto/crypto_tls.cc, where CertCbDone fails to install a specific client-certificate CA in a CA-only SNI context if the setSniContext returns false (which happens when ...

CVE-2026-123867: nodejs node: A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a…

A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hostname it is not authorized for. When a TLS server assigns a hostname a different client-certificate CA with server.addContexthost, ca: protectedCA but no server certificate...