CVE-2026-119760

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo...

EUVD-2026-114237

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo...

CVE-2026-119760

The sniproxy daemon, version 0.7.0 and prior, contains a NULL pointer dereference vulnerability within the resolv_cancel() function. This flaw allows remote unauthenticated attackers to crash the service by providing overlong hostnames , specifically 254 or 255 character TLS SNI names or HTTP Hos...