Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
12 IOCs
Critical Node.js Security Release Patches 12 Vulnerabilities Including Authentication Bypass
Excerpt
The Node.js project has released critical security updates across its 22.x, 24.x, and 26.x release lines, addressing 12 vulnerabilities, including two high-severity flaws that could enable authentication bypass and cause remote processes to crash. These updates, released on June 18, 2026, require users running any supported Node.js version to update immediately to the patched releases: v22.23.0, v24.17.0, and v26.3.1. Node.js Security Release Patches 12 Vulnerabilities Two…
Read the original report →Indicators of Compromise
Open the mindmap →12 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-48619 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48931 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48615 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48936 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48617 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48618 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48934 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48928 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48930 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48935 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48937 | Medium | Score 51/100 | First seen |
| CVE | CVE-2026-48933 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…