223 matches found
CVE-2026-102612
The BACnet Stack C library for embedded systems contains a vulnerability in versions prior to 1.4.6, 1.5.2, and 1.6.1 . The root cause is located in bws_srv_start() within ports/linux/websocket-srv.c, where the libwebsockets server context is built with a CA certificate but fails to set the LWS_S...
ttyd
ttyd - Share your terminal over the web ttyd is a simple command-line tool for sharing terminal over the web. Features Built on top of libuv and WebGL2 for speed Fully-featured terminal with CJK and IME support ZMODEM lrzsz / trzsz file transfer support Sixel image output support img2sixel / lsix...
CVE-2026-114550
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
Linux Distros Unpatched Vulnerability : CVE-2026-114550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut...
CVE-2026-114550
A flaw was found in libwebsockets. When processing Message Queuing Telemetry Transport MQTT publish acknowledgment PUBACK packets, incoming network data is not properly validated, resulting in an out-of-bounds memory write. An unauthenticated remote attacker can exploit this vulnerability by...
CVE-2026-114550
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
DEBIAN-CVE-2026-114550
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
CVE-2026-114550
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
CVE-2026-114550 libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
CVE-2026-114550
A vulnerability exists in the libwebsockets library affecting versions with MQTT support enabled (LWS_ROLE_MQTT ). The flaw is located in the handling of MQTT PUBACK packets , where the parser fails to properly validate user-supplied data. Specifically, when a PUBACK carries properties, the parse...
CVE-2026-114550 libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific...
CVE-2026-19773
A flaw was found in libwebsockets. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specially crafted HTTP/2 network traffic. The issue occurs due to improper input validation during the parsing of path headers compressed with HPACK a...
OESA-2026-4616 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This...
OESA-2026-4615 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This...
OESA-2026-4614 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This...
OESA-2026-4613 libwebsockets security update
Libwebsockets LWS is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fixes: libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This...
PT-2026-125501
Name of the Vulnerable Software and Affected Versions libwebsockets affected versions not specified Description Remote attackers can execute arbitrary code on affected installations without authentication. The issue occurs during the handling of PUBACK packets due to insufficient validation of...
libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PUBACK packets. The issue results from the lack of proper validation of...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libwebsockets (UTSA-2026-142308)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142308 advisory. libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitra...
Linux Distros Unpatched Vulnerability : CVE-2026-95115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser CVE-2026-95115 Note...