CVE-2026-102479

Name of the Vulnerable Software and Affected Versions Eclipse Vert.x versions 5.0.0 through 5.0.12 Eclipse Vert.x versions 5.1.0 through 5.1.9 Eclipse Vert.x version 5.2.0

Description The HTTP/1.x decoder in the io.vertx:vertx-core component uses a canonicalization process for well-known HTTP headers. This process can be manipulated by using specially crafted headers, such as Content-Xength, which the system incorrectly interprets as Content-Length. This behavior can be exploited to perform request smuggling, a technique used to interfere with the way a website processes sequences of HTTP requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.