CVE-2026-86350

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-86350 Write-up: https://abraxaslabs.tech/research/CVE-2026-86350 CVE-2026-86350 Apache Tomcat 9.0.121 - Apache Software Foundation I am @abraxasnull. Loopback lab. The client is CVE-2026-86350-Abraxas-Labs.py...

CLEANSTART-2026-IO26222 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP

Security vulnerability affects the azure-functions-host package. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP...

CLEANSTART-2026-YW87964 Inconsistent interpretation of http requests ('http request/response smuggling') in ASP

Security vulnerability affects the azure-functions-host package. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Tampering Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Apache Tomcat. Apache Tomcat is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-77756 DESCRIPTION:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty (CVE-2026-89044, CVE-2026-93488)

Summary IBM Watson Speech Services Cartridge is vulnerable to an OutOfMemoryError and HTTP Request/Response Smuggling in Netty. Netty is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty (CVE-2026-56819, CVE-2026-59900)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Uncontrolled Resource Consumption and HTTP Request/Response Smuggling in Netty, due to flaws in Netty's HTTP/2-to-HTTP/1.x translation layer and DelegatingDecompressorFrameListener. Netty is used in our Speech microservices. These...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3248)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3248 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3249)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3249 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3250)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3250 advisory. Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188...

Critical: dotnet9.0

Issue Overview: Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188 Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core...

Critical: dotnet10.0

Issue Overview: Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188 Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core...

Critical: dotnet8.0

Issue Overview: Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-70188 Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core...