CVE-2026-18825

Origin validation error in the connect-xcors npm package PUBLISHED

Description (CNA)

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.

Affected (CNA)

Vendor / product	Versions
github.com/antono / connect-cors	affected 0 through 0.5.6

CWE

CWE-346

References

https://www.thalesgroup.com/en/search/cybersecurity/cybersecurity-services/cve-2026-18825

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.