Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-48936

Опубликовано: 26 июн. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 3.3

Описание

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the --allow-net permission. This vulnerability affects one supported release line: Node.js 26.

РелизСтатусПримечание
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-infra-legacy/trusty

needs-triage

jammy

needs-triage

noble

needs-triage

Показывать по

EPSS

Процентиль: 3%
0.00135
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
nvd
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
debian
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be starte ...

CVSS3: 3.3
github
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

EPSS

Процентиль: 3%
0.00135
Низкий

3.3 Low

CVSS3