CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

Malicious code in azure-communication-network-traversal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7a0cec00dbd776206a45492d115fdad30ccb30649387fcb23e928778c431a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2136 Malicious code in communication-network-traversal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9644017375dc5e148ea3c57c8227a481169d1336d4ed3abeb0c2d09728a6c81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...