Nodemailer before 8.0.8 TLS Certificate Validation Bypass

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-82662 · Microsoft / collected KEV context

EUVD-2026-68440

GHSA-frj6-5rhh-vwfw

GHSA-r7g4-qg5f-qqm2

cve-program · CVE-2026-82662

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2
• https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass

euvd · EUVD-2026-68440

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2
• https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass

nvd · CVE-2026-82662

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2
• https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass

osv · GHSA-frj6-5rhh-vwfw

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2
• https://nvd.nist.gov/vuln/detail/CVE-2026-82662
• https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass

osv · GHSA-r7g4-qg5f-qqm2

• https://github.com/nodemailer/nodemailer/security/advisories/GHSA-r7g4-qg5f-qqm2
• https://nvd.nist.gov/vuln/detail/CVE-2026-82662
• https://github.com/nodemailer/nodemailer
• https://www.vulncheck.com/advisories/nodemailer-before-8.0.8-tls-certificate-validation-bypass

No related operational record is retained in the current change model.