CVE-2026-106074

MEDIUM

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build...

Affects 0 products across 1 vendor.

CVSS 3.04.8
EPSS0.3%
Percentile27th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, high complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no availability impact.
CWE Weakness Definitions
CWE-330: CWE-330
Related Attack Patterns (CAPEC)
CAPEC-59 Session Credential Falsification through Prediction
via CWE-330
CAPEC-485 Signature Spoofing by Key Recreation
via CWE-330
CAPEC-112 Brute Force
via CWE-330

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A medium severity vulnerability (CVE-2026-106074) affects the target system. A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built ...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-106074?
A medium severity vulnerability (CVE-2026-106074) affects the target system. A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built ...
What is the CVSS score for CVE-2026-106074?
CVE-2026-106074 has CVSS 4.8 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS: 0.3%.
Is CVE-2026-106074 actively exploited?
No confirmed active exploitation of CVE-2026-106074 as of 2026-10-30.
How do I remediate CVE-2026-106074?
Apply vendor patches for CVE-2026-106074. Monitor Fortinet advisories.
What systems are affected by CVE-2026-106074?
CVE-2026-106074 affects Fortinet.
Vulnerability Details
CVE IDCVE-2026-106074
CVSS VectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Published2026-10-23
Last Modified2026-10-23
ICS Relevance55%
Weakness (CWE)
CWE-330
SourceNVD
Official Description

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`. If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Fortinet — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Fortinet
CVE-2005-3057 10.0 The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and ot... CVE-2026-26084 9.9 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 throug... CVE-2016-1909 9.8 Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.... CVE-2019-6695 9.8 Lack of root file system integrity checking in Fortinet FortiManager VM appli... CVE-2021-24019 9.8 An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS...
View all Fortinet CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →