Threats tagged 'ghsa-wj2x-x5pc-4h8r'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-124040CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in Critical9.22026-11-06GCVE DatabaseCVE-2026-124040 CivetWeb versions up to 1.16, when built with HTTP/2 support enabled, contain a use-after-free vulnerability in the HTTP/2 request handling function. This flaw allows unauthenticated remote attackers to manipulate HTTP/2 HEADERS frames to influence the request method or path used by access control rules or cause a server crash. Report on CVE-2026-124040 Vulnerability CWE-416 #ghsa-wj2x-x5pc-4h8r	GCVE Database	2026-11-06

Page 1 of 1