Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:node-Opcua:node-Opcua:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

node-opcua: Namespace-level RBAC bypass (CVE-2026-95860)

A namespace-level RBAC fail-open vulnerability in node-opcua (CVE-2026-95860) allows unauthenticated network clients to perform unauthorized writes or method calls due to improper role permission inheritance.

node-opcua vulnerability rbac opc-ua authorization-bypass
1t 1c