{"id":"CVE-2026-63642","title":"MagicMirror² is an open source modular smart mirror platform","summary":"MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification through the unauthenticated Socket.IO namespace /newsfeed…","severity":"medium","cwe":["CWE-918"],"vendor":"magicmirror","product":"magicmirror","affected":["magicmirror < 2.37.0"],"patched":["magicmirror 2.37.0"],"published":"2026-08-18","updated":"2026-09-08","sourceUpdated":"2026-09-08T21:02:26.047","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-63642","references":[{"url":"https://github.com/MagicMirrorOrg/MagicMirror/commit/58c2a5e675a7d367b64d72e1d35680d202ff5c9f","label":"security-advisories@github.com"},{"url":"https://github.com/MagicMirrorOrg/MagicMirror/pull/4169","label":"security-advisories@github.com"},{"url":"https://github.com/MagicMirrorOrg/MagicMirror/releases/tag/v2.37.0","label":"security-advisories@github.com"},{"url":"https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-998g-7v5w-cr7g","label":"security-advisories@github.com"},{"url":"https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-998g-7v5w-cr7g","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/advisories/GHSA-998g-7v5w-cr7g"}],"tags":["nvd","ghsa","npm","exploit-available"],"epss":0.00462,"epssPercentile":0.39317,"aliases":["GHSA-998g-7v5w-cr7g"],"ecosystem":"npm","ingestedAt":"2026-08-18T18:21:29.882Z","exploits":{"github":1,"githubRepos":["https://github.com/hakaioffsec/CVE-2026-63642"],"checkedAt":"2026-09-23T07:14:33.525Z"},"exploitAvailable":true,"slug":"CVE-2026-63642","body":"## Overview\n\nMagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification through the unauthenticated Socket.IO namespace /newsfeed and performs fetch(url, { method: \"HEAD\" }) without validating the attacker-controlled URL. The helper returns ARTICLE_URL_STATUS containing the URL and framing result, providing a response and timing oracle that can identify internal hosts and ports and trigger side effects on services that react to HEAD requests. This issue is fixed in version 2.37.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-63642)\n\nAffected packages:\n\n- `magicmirror < 2.37.0`\n\nPatched in:\n\n- `magicmirror 2.37.0`\n\nSource: https://github.com/advisories/GHSA-998g-7v5w-cr7g","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":27.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201850,"id":"CVE-2026-63642","ts":1789399862181,"field":"exploit_available","old":"false","new":"true"},{"seq":200580,"id":"CVE-2026-63642","ts":1789397447723,"field":"exploit_available","old":"true","new":"false"},{"seq":198497,"id":"CVE-2026-63642","ts":1789392043319,"field":"exploit_available","old":"false","new":"true"},{"seq":196290,"id":"CVE-2026-63642","ts":1789383651024,"field":"exploit_available","old":"true","new":"false"},{"seq":195219,"id":"CVE-2026-63642","ts":1789380507378,"field":"exploit_available","old":"false","new":"true"},{"seq":194006,"id":"CVE-2026-63642","ts":1789378588110,"field":"exploit_available","old":"true","new":"false"},{"seq":192793,"id":"CVE-2026-63642","ts":1789376437488,"field":"exploit_available","old":"false","new":"true"},{"seq":191580,"id":"CVE-2026-63642","ts":1789373500847,"field":"exploit_available","old":"true","new":"false"},{"seq":190365,"id":"CVE-2026-63642","ts":1789369386132,"field":"exploit_available","old":"false","new":"true"},{"seq":189152,"id":"CVE-2026-63642","ts":1789368306648,"field":"exploit_available","old":"true","new":"false"},{"seq":187935,"id":"CVE-2026-63642","ts":1789365177898,"field":"exploit_available","old":"false","new":"true"},{"seq":186722,"id":"CVE-2026-63642","ts":1789363348811,"field":"exploit_available","old":"true","new":"false"},{"seq":185508,"id":"CVE-2026-63642","ts":1789361157003,"field":"exploit_available","old":"false","new":"true"},{"seq":184295,"id":"CVE-2026-63642","ts":1789358219297,"field":"exploit_available","old":"true","new":"false"},{"seq":182546,"id":"CVE-2026-63642","ts":1789354253646,"field":"exploit_available","old":"false","new":"true"},{"seq":181339,"id":"CVE-2026-63642","ts":1789353205288,"field":"exploit_available","old":"true","new":"false"},{"seq":180132,"id":"CVE-2026-63642","ts":1789350206723,"field":"exploit_available","old":"false","new":"true"},{"seq":178925,"id":"CVE-2026-63642","ts":1789348166829,"field":"exploit_available","old":"true","new":"false"},{"seq":177718,"id":"CVE-2026-63642","ts":1789346312726,"field":"exploit_available","old":"false","new":"true"},{"seq":176511,"id":"CVE-2026-63642","ts":1789343088879,"field":"exploit_available","old":"true","new":"false"},{"seq":174628,"id":"CVE-2026-63642","ts":1789334820383,"field":"exploit_available","old":"false","new":"true"},{"seq":173423,"id":"CVE-2026-63642","ts":1789333549885,"field":"exploit_available","old":"true","new":"false"},{"seq":172237,"id":"CVE-2026-63642","ts":1789331037900,"field":"exploit_available","old":"false","new":"true"},{"seq":171051,"id":"CVE-2026-63642","ts":1789328664528,"field":"exploit_available","old":"true","new":"false"},{"seq":169846,"id":"CVE-2026-63642","ts":1789327089391,"field":"exploit_available","old":"false","new":"true"},{"seq":168641,"id":"CVE-2026-63642","ts":1789323723426,"field":"exploit_available","old":"true","new":"false"},{"seq":167436,"id":"CVE-2026-63642","ts":1789319614143,"field":"exploit_available","old":"false","new":"true"},{"seq":166231,"id":"CVE-2026-63642","ts":1789318619581,"field":"exploit_available","old":"true","new":"false"},{"seq":165026,"id":"CVE-2026-63642","ts":1789315735188,"field":"exploit_available","old":"false","new":"true"},{"seq":163821,"id":"CVE-2026-63642","ts":1789313521862,"field":"exploit_available","old":"true","new":"false"},{"seq":162616,"id":"CVE-2026-63642","ts":1789311841145,"field":"exploit_available","old":"false","new":"true"},{"seq":161411,"id":"CVE-2026-63642","ts":1789308594217,"field":"exploit_available","old":"true","new":"false"},{"seq":160916,"id":"CVE-2026-63642","ts":1789304534931,"field":"exploit_available","old":"false","new":"true"},{"seq":160463,"id":"CVE-2026-63642","ts":1789304050166,"field":"exploit_available","old":"true","new":"false"},{"seq":159524,"id":"CVE-2026-63642","ts":1789300424969,"field":"exploit_available","old":"false","new":"true"},{"seq":156513,"id":"CVE-2026-63642","ts":1789294654037,"field":"exploit_available","old":"true","new":"false"},{"seq":155308,"id":"CVE-2026-63642","ts":1789292843444,"field":"exploit_available","old":"false","new":"true"},{"seq":154103,"id":"CVE-2026-63642","ts":1789289681345,"field":"exploit_available","old":"true","new":"false"},{"seq":152753,"id":"CVE-2026-63642","ts":1789281555872,"field":"exploit_available","old":"false","new":"true"},{"seq":152393,"id":"CVE-2026-63642","ts":1789281154486,"field":"exploit_available","old":"true","new":"false"},{"seq":151354,"id":"CVE-2026-63642","ts":1789277569168,"field":"exploit_available","old":"false","new":"true"},{"seq":150315,"id":"CVE-2026-63642","ts":1789276147545,"field":"exploit_available","old":"true","new":"false"},{"seq":149282,"id":"CVE-2026-63642","ts":1789273774822,"field":"exploit_available","old":"false","new":"true"},{"seq":148249,"id":"CVE-2026-63642","ts":1789271179737,"field":"exploit_available","old":"true","new":"false"},{"seq":146284,"id":"CVE-2026-63642","ts":1789269302673,"field":"exploit_available","old":"false","new":"true"},{"seq":142896,"id":"CVE-2026-63642","ts":1789261405961,"field":"exploit_available","old":"true","new":"false"},{"seq":141727,"id":"CVE-2026-63642","ts":1789258772954,"field":"exploit_available","old":"false","new":"true"},{"seq":140568,"id":"CVE-2026-63642","ts":1789256620808,"field":"exploit_available","old":"true","new":"false"},{"seq":139370,"id":"CVE-2026-63642","ts":1789254747849,"field":"exploit_available","old":"false","new":"true"},{"seq":138172,"id":"CVE-2026-63642","ts":1789251838020,"field":"exploit_available","old":"true","new":"false"}]}