CVE-2026-18825
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.
- Published Sep 28, 2026
- CVSS 5.3 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)