CVE-2026-12606

MEDIUM CVSS 5.3 View on NVD ↗

Description

Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products

eclipse/grizzly

References

https://gitlab.eclipse.org/security/cve-assignment/-/work_items/129

Published: Jul 14, 2026 09:16 UTC Modified: Jul 14, 2026 20:55 UTC