PT-2026-52062 · Openjs Foundation · Node.Js

Publicado 2026-06-19 · Atualizado 2026-06-26 · CVE-2026-48934

Positive Technologies (AI Summary) · Pt

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Nome do Software Vulnerável e Versões Afetadas Node.js versões 22.x até 26.3.0

Descrição Uma falha no processo de verificação de host TLS permite que um invasor ignore a validação de certificação.

Recomendações Atualize o Node.js para a versão 26.3.1 ou posterior.

Correção

Identificadores relacionados

CVE-2026-48934

OPENSUSE-SU-2026:11110-1

OPENSUSE-SU-2026:11121-1

SUSE-SU-2026:2633-1

SUSE-SU-2026:2647-1

Produtos afetados

Node.Js

Referências · 84

• https://suse.com/security/cve/CVE-2026-48930 · Nota
• https://suse.com/security/cve/CVE-2024-37372 · Nota
• https://suse.com/security/cve/CVE-2026-21710 · Nota
• https://bugzilla.suse.com/1268618 · Nota
• https://nodejs.org/en/blog/vulnerability/june-2026-security-releases#tls-host-identity-verification-bypass-via-session-reuse-with-different-servername-leads-to-unauthorized-connections-cve-2026-48934---medium · Nota
• https://bugzilla.suse.com/1268478 · Nota
• https://bugzilla.suse.com/1268598 · Nota
• https://suse.com/security/cve/CVE-2025-23165 · Nota
• https://bugzilla.suse.com/1268592 · Nota
• https://bugzilla.suse.com/1268554 · Nota
• https://bugzilla.suse.com/1268479 · Nota
• https://suse.com/security/cve/CVE-2024-22018 · Nota
• https://suse.com/security/cve/CVE-2024-22020 · Nota
• https://suse.com/security/cve/CVE-2025-59465 · Nota
• https://suse.com/security/cve/CVE-2026-48937 · Nota