CVE-2026-48928 – Node.js Hostname Mismatch Trust Policy Bypass

CVE ID :CVE-2026-48928

Published : June 26, 2026, 1:14 a.m. | 30 minutes ago

Description :A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.

This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…