CVE-2026-108395

A flaw was found in the Model Context Protocol MCP Java SDK, which can lead to a Denial of Service DoS. The server transports read incoming HTTP request bodies directly into memory without enforcing a maximum size limit. An unauthenticated remote attacker can exploit this vulnerability by sending...

CVE-2026-121727

A flaw was found in Kore. An unauthenticated remote attacker can trigger an integer underflow in the HTTP request body handling mechanism by sending more body data than declared in the request header. This flaw allows the attacker to bypass configured maximum body size restrictions, resulting in...

CVE-2026-82904

Uncontrolled Resource Consumption in ServiceMultiEventHandler in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote unauthenticated attacker to pin a server request thread for an attacker-chosen number of synchronous service dispatches, up to the signed-integer maximum, by...

CVE-2026-103866

Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before...

CVE-2026-103866

The Apache Sling Engine is vulnerable to HTTP Request/Response smuggling (CWE-444, CWE-436) in versions prior to 3.0.4 . The root cause is a hand-rolled query/form parameter parser that diverges from RFC/container parsing by accepting non-standard percent-escapes , incorrect charsets, and continu...

CVE-2026-103866 Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling

Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before...

EUVD-2026-117433

Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before...

CVE-2026-123010

@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set...

CVE-2026-123010

The @twilio-labs/netlify-okta-auth library (versions through 1.0.2 ) is vulnerable because it relies on an unverified iss claim . This flaw impacts an outbound HTTP request used to retrieve a public signing key. Additionally, there may be further impacts if the oktaUrl is left unset due to miscon...

EUVD-2026-117323

@twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set...

request_smuggler

Request smuggler Http request smuggling vulnerability scanner Based on the amazing research by James Kettle. The tool can help to find servers that may be vulnerable to request smuggling vulnerability. Archived The tool needs a lot of improvements, and I don't have enough time to support it as I...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the apply action in StorageMgmtController. The callStoragePerl function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerabili...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the addModifyZTDProxy function in NmsController. The function does not sufficiently validate or sanitize HTTP request parameter values that are used to construct a shell command. An attacker can trigger this vulnerability by...

SUSE SLED15 / SLES15 Security Update : libsoup (SUSE-SU-2026:5062-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5062-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x earl...

SUSE SLES15 Security Update : libsoup (SUSE-SU-2026:5063-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5063-1 advisory. This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow...

CVE-2026-103866: Apache Software Foundation Apache Sling Engine: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine

Inconsistent interpretation of HTTP requests 'HTTP Request/Response smuggling' vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors. This issue affects Apache Sling Engine: before...

Linux Distros Unpatched Vulnerability : CVE-2026-121727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass httpbodymax by sendi...

CVE-2026-63655 tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-body chunk in a Buffer without a...