CVE-2026-54919

Name of the Vulnerable Software and Affected Versions cpp-httplib versions 0.31.0 through 0.46.1

Description When built with CPPHTTPLIB MBEDTLS SUPPORT or CPPHTTPLIB WOLFSSL SUPPORT and a client connects to an IP-literal host with server certificate verification enabled, SSLClient and Client in HTTPS mode skip certificate chain validation. Additionally, WebSocketClient on the Mbed TLS backend skips verification entirely. This allows a man-in-the-middle attacker to intercept traffic by presenting a crafted certificate to read or modify the data.

Recommendations Update to version 0.47.0.