CVE-2026-55614

The uhttpd HTTP server is vulnerable to HTTP request smuggling and boundary desynchronization due to a case-sensitivity flaw in header parsing. Specifically, the client_parse_header() function in client.c correctly lowercases header names but uses a case-sensitive strcmp to check the Transfer-Enc...