Skip to content
Nnode-opcua
Products
| Product | CVEs | Exploited | Latest |
|---|
| node-opcua | 5 | – | Nov 3, 2026 |
Exploited and recent CVEs
-
CVE-2026-95860
Critical 9.1
node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
0.6%
-
CVE-2026-68904
High 7.0
node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion
0.4%
-
CVE-2026-69200
Low 3.7
node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)
0.3%
-
CVE-2026-54156
High 7.5
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
0.8%
-
CVE-2026-54155
High 7.7
node-opcua: Missing nonce verification in UserNameIdentityToken authentication
0.4%