CVE-2026-75931

🗓️ 27 Aug 2026 13:08:38Reported by redhat.comType

redhatcve🔗 access.redhat.com👁 13 Views

IDN handling in fast-uri scheme-relative references causes host confusion enabling policy bypass.

Reporter	Title	Published	Views	Family All 249
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple issues like double decoding, interpretation conflict and more due to the use of fast-uri (CVE-2026-75899, CVE-2026-75931, CVE-2026-75975, CVE-2026-76172)	7 Sep 202607:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	7 Oct 202616:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities	1 Oct 202609:59	–	ibm
IBM Security Bulletins	Security Bulletin: fast-uri-3.1.5.tgz (Publicly disclosed vulnerability found by Scanner)	17 Sep 202620:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	7 Oct 202616:16	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	21 Sep 202622:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in fast-uri-3.1.3.tgz are addressed in APIM 11.1	4 Oct 202617:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules	7 Sep 202612:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Remediator is affected by mutiple vulnerabilities	22 Sep 202604:31	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in fast-uri.	29 Sep 202609:14	–	ibm

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-75931
cna	www.cna.openjsf.org/security-advisories.html
github	www.github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

29 Aug 2026 14:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00398

SSVC

fast-uri host confusion IDN handling policy bypass URI parsing scheme-relative