Linuxsecurity Multiple Node.js Security Vulnerabilities in Oracle Linux 9 and 10
Article Content
- •Oracle Linux 9 and 10 have critical Node.js vulnerabilities requiring immediate patching.
- •CVE-2026-69152 and others could lead to remote code execution and denial of service.
- •Patches for Node.js versions 22.23.2 and 24.19.0 are now available.
Oracle has released multiple security advisories for Node.js vulnerabilities affecting Oracle Linux 9 and 10. The advisories include ELSA-2026-61383 and ELSA-2026-61386 for Oracle Linux 9, addressing CVEs such as CVE-2026-56846, CVE-2026-56848, and CVE-2026-69152. The vulnerabilities could potentially allow for remote code execution and denial of service attacks. Oracle Linux 10 also received an update (ELSA-2026-61376) that addresses similar vulnerabilities with Node.js version 22.23.2. Administrators are urged to apply the patches immediately to mitigate risks. The updates include important fixes and enhancements to the Node.js packages and their dependencies. The advisories emphasize the importance of maintaining up-to-date systems to prevent exploitation. As of now, there are no confirmed reports of active exploitation for these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track CVE-2026-56846 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…