SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-58042

MEDIUM · CVSS 5.9 EPSS 0.37%

Source: NVD + CISA KEV + EPSS · Published 2026-08-04 · Last synced 2026-09-03

CyberRota Analysis

AI-Generated

A flaw in Node.js affects versions 22.x, 24.x, and 26.x, where the dns.resolveAny() function can cause the Node.js process to abort if a DNS response contains more than 256 A records. This vulnerability can be exploited to achieve a denial of service through repeated triggering. Organizations using these Node.js versions should prioritize patching to mitigate potential service disruptions.

CVE
CVE-2026-58042
Severity
MEDIUM
CVSS
5.9
EPSS
0.37%

Original NVD Description

A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.