Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-40175 [Medium]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-40175.

CVSS: 4.8
Coverage Span: 2026-04-14
Reports: 1 related reports

Associated Reports & Timeline

Axios CVE-2026-40175: a critical bug that’s… not exploitable

Aikido analyzed the 'critical' Axios CVE-2026-40175 gadget chain—prototype pollution to CRLF injection to SSRF—and concluded Node.js blocks CRLF in headers, making it unexploitable in practice.