CVE WATCH / VULNERABILITY DETAIL
CVE-2026-102599
HIGHCVSS 7.5NVD feed
Published 13 October 2026 · tracked since 14 October 2026
Description
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious clie
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110215 HIGH 8.8
- CVE-2026-109428 HIGH 8.8
- CVE-2026-108471 HIGH 8.8
- CVE-2026-108463 HIGH 8.8
- CVE-2026-108400 HIGH 8.8
- CVE-2026-108457 HIGH 8.1
- CVE-2026-108460 HIGH 8.1
- CVE-2026-108136 HIGH 7.8
- CVE-2026-108398 HIGH 8.8
- CVE-2026-108130 HIGH 7.8