Skip to content

CVE record · 1 source

CVE-2026-95860

CVSS 9.1

node-opcua is an OPC UA implementation for TypeScript and Node.js.

Vendor: Node-Opcua
Product: node-opcua
CVSS v3.1: 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-285, CWE-636, CWE-863, CWE-1188
Exposure class: Developer platform, OT / ICS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

43

CVE NVD 3h ago

node-opcua is an OPC UA implementation for TypeScript and Node.js.

node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.42.0 until 2.180.0, namespace-level access control configured through setDefaultRolePermissions is not honored by the runtime enforcement path for nodes…

CVSS 9.1 Fix available CVE-2026-95860 Node-Opcua