node-opcua vulnerabilities
5 published CVEs name node-opcua among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-95860
node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
node-opcua · node-opcua
Critical9.1 - CVE-2026-68904
node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion
node-opcua · node-opcua
High7.0 - CVE-2026-69200
node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)
node-opcua · node-opcua
Low3.7 - CVE-2026-54156
node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS
node-opcua · node-opcua
High7.5 - CVE-2026-54155
node-opcua: Missing nonce verification in UserNameIdentityToken authentication
node-opcua · node-opcua
High7.7