Skip to content

CVE-2026-25639

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
February 10, 2026
Last Seen
February 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Axios Vulnerability Enables DoS Attacks on Node.js Servers25.9

A security vulnerability in Axios, tracked as CVE-2026-25639, has been identified, allowing remote attackers to trigger a Denial-of-Service (DoS) condition that can crash Node.js servers with a single malicious request. The flaw is located in the mergeConfig function, which merges configuration obje...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

DDoST1499 - Endpoint Denial of ServiceAxiosNode.js