PT-2026-57984

CVE-2026-12606

Published

2026-07-14

Updated

2026-07-15

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Eclipse Grizzly versions prior to 5.0.2

Description An issue exists where the software cannot properly parse the trailer section in a malformed trailer header line. This flaw can be leveraged to perform HTTP request smuggling, a technique used to interfere with the way a website processes sequences of HTTP requests.

Recommendations Update to version 5.0.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Sebastiano Sartor

Vendors

Affected products

Weakness enumeration

CWE-444: Inconsistent Interpretation of HTTP Requests (\'HTTP Request/Response Smuggling\')

Related identifiers