Libwebsockets versions prior to 4.3.3-9.oe2403sp3 contain an out-of-bounds read vulnerability in the LEJP incremental parser, which can be exploited remotely to cause a denial of service. This vulnerability is identified as CVE-2026-95114 and has a high severity rating. A patch is available in version 4.3.3-9.oe2403sp3 that addresses this issue.