CVE-2026-18825 — Origin validation error in the connect-xcors npm package
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.
Published: 2026-09-28 · CVSS: 5.3 · CVSS 4.0
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7