CVE-2026-42041 — Axios is a promise based HTTP client for the browser and

title: CVE-2026-42041 - Axios Prototype Pollution - ValidateStatus Override
id: scw-2026-04-24-ai-1
status: experimental
level: critical
description: |
  This rule detects the exploitation of CVE-2026-42041 by identifying HTTP requests where the 'validateStatus' configuration parameter is manipulated to always return true, effectively suppressing all HTTP error responses and allowing unauthorized access or data leakage. This is a direct indicator of the prototype pollution attack targeting the Axios library.
author: SCW Feed Engine (AI-generated)
date: 2026-04-24
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-42041/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      sc-status:
          - '200'
      cs-uri-query|contains:
          - 'validateStatus'
      cs-uri-query|contains:
          - '() => true'
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse