Medium severityNVD Advisory· Published Sep 28, 2026· Updated Sep 28, 2026

CVE-2026-18825

Description

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.

Affected products

Npm/connect-xcorsllm-fuzzy

Patches

Vulnerability mechanics

References

cds.thalesgroup.com/en/tcs-cert/CVE-2026-18825nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000