CVE Feed

    Dashboard / CVE / CVE-2026-120309

    CVE-2026-120309

    Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams that lets attackers return a parameter value different from the one h3 matched by sending paths containing an encoded question mark (%3F). Attackers can craft requests where authorization checks use the Nuxt helper value while resource selection uses event.context.params, allowing access to unauthorized resources.

    Published:Nov 2, 2026
    Last Modified:Nov 2, 2026
    EPS:Nov 2, 2026
    EPSS Score:
    CVSS Score:3.7

    Affected Products

    Vendor
    Nuxt
    Product
    Nuxt
    Vendor
    Nuxt
    Product
    Nuxt/nitro-server
    Vendor
    Nuxt
    Product
    Nuxt\/nitro-server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-436 Interpretation Conflict

    Related CVEs

    CVE-2026-119201 (CVSS 4.8) — Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generat…
    CVE-2026-119200 (CVSS 6.5) — Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or …
    CVE-2026-119199 (CVSS 5.9) — Nuxt is an open-source web development framework for Vue.js. From 3.0.0 until 4.6.3, the Nuxt development serv…
    CVE-2026-119198 (CVSS 5.9) — Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access …
    CVE-2026-114133 (CVSS 5.4) — Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island render…
    CVE-2026-114132 (CVSS 6.3) — Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensit…
    CVE-2026-114131 (CVSS 6.5) — Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares…
    CVE-2026-114130 (CVSS 2.3) — Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53…
    CVE-2026-72744 (CVSS 6.9) — Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerabili…
    CVE-2026-71321 (CVSS 7.5) — Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High