CVE-2026-12549

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A regression occurred when a rework commit replaced specific overflow checks with a general signed comparison. This issue is triggered when a client sends a Range request with a suffix length that exceeds the content size. Because the resulting negative start value is not properly clamped, the system generates malformed HTTP 206 responses and causes log flooding.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.