147594 matches found
CVE-2026-105036: Download of Code Without Integrity Check
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.120260617182218release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept or modify the traffic can substitute a...
CVE-2026-102475: Allocation of Resources Without Limits or Throttling
In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to force a server to indefinitely allocate heap. This vulnerabilit...
CVE-2026-0993: Buffer Copy without Checking Size of Input
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP...
PT-2026-114837
Name of the Vulnerable Software and Affected Versions undici versions 8.11.0 through 8.11.1 Description The experimental WebSocket client in this Node.js HTTP client library mishandles failed WebSocket handshakes over HTTP/2. Because the request is marked as completed, the abort operation is...
CVE-2026-109855
undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the...
CVE-2026-109855: Uncaught Exception
undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a failed WebSocket handshake over HTTP/2: the request is already marked completed, so the abort becomes a no-op and the...
PT-2026-115119
Name of the Vulnerable Software and Affected Versions undici versions 7.0.0 through 7.30.0 undici versions 8.0.0 through 8.12.1 Description An issue exists in this HTTP client library for Node.js when an originless Agent composes redirect and cache interceptors in that specific order while using ...
PT-2026-122836
Security vulnerability affects the strimzi-kafka-operator package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
PT-2026-122867
Security vulnerability affects the elasticsearch package. The vulnerability occurs when a client sends HTTP/1...
PT-2026-122726
Security vulnerability affects the elasticsearch package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...
PT-2026-122695
Security vulnerability affects the strimzi-kafka-operator package. It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak...
PT-2026-122763
Security vulnerability affects the renovate package. http-cache-semantics through 4...
UBUNTU-CVE-2026-95101
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject...
CVE-2026-104827: Allocation of Resources Without Limits or Throttling
react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStream::handleData to append response-header bytes to an internal buffer without enforcing a size limit. A remote server can send a valid stat...
PT-2026-115093
Name of the Vulnerable Software and Affected Versions react/http versions 1.0.0 through 1.11.0 Description ReactHttpBrowser fails to enforce a size limit on the internal buffer used to store response-header bytes. When the handleData function in ClientRequestStream receives data, it appends...
CVE-2026-95101
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject...
PT-2026-114978
Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.145.0 Description An unauthenticated remote client can trigger a denial of service by sending an unsupported or non-canonical HTTP method such as PROPFIND or lowercase get to an existing static path. The...
Unity Linux 20.1070e Security Update: libsoup (UTSA-2026-130370)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130370 advisory. A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause...
RHCOS 4 : OpenShift Container Platform 4.18.57 (RHSA-2026:79034)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79034 advisory. - net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGSMAXFRAMESIZE frame CVE-2026-33814 No...