SecOps SignalSecurity Intelligence Workspace
Loading collection status
Source: Fortinet PSIRT · Limited verificationCanonical source
RECENTAnalysis pending

Node2Shell CVEs

Published
26 Oct 2026, 12:30 PM IST
Source
Fortinet PSIRT · Limited verification
Classification
Source security intelligence
Linked CVECVE-2026-105482
Unknown / EvaluatingImportant (raw)
CVSS 7.4EPSS 0.005 · 41st %ile
Linked CVECVE-2026-105483
Unknown / EvaluatingImportant (raw)
CVSS 7.4EPSS 0.003 · 23rd %ile
Linked CVECVE-2026-106069
Unknown / EvaluatingImportant (raw)
CVSS 7.4EPSS 0.003 · 23rd %ile

Section 01 · What happened

Publisher text

CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high)A flaw in Node.js can cause Node.js Brotli decoder out-of-bounds write permits remote code execution.This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105481 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106072 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106074 - (medium)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-106070 - (low)This vulnerability affects Node.js 26.x.CVE-2026-106071 - (low)This vulnerability affects Node.js 26.x.CVE-2026-106073 - (low)This vulnerability affects Node.js 26.x, 24.x, and 22.x.

Revised on 2026-11-03 00:00:00

Attributed to Fortinet PSIRT · Limited verification; verify facts against the linked source. Read the full article on fortiguard.fortinet.com.

Section 02 · Sources and evidence

1 public source

Source published: 26 Oct 2026, 12:30 PM IST. Source facts take precedence over AI interpretation.

https://fortiguard.fortinet.com/psirt/FG-IR-26-187fortiguard.fortinet.com