PT-2026-70591 · Microsoft+3 · .Net Framework+3

CVE-2026-62899

·

Published

2026-08-11

·

Updated

2026-08-18

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions .NET (affected versions not specified)
Description Inconsistent interpretation of HTTP requests, known as HTTP request/response smuggling, allows an unauthorized attacker to bypass security features over a network. HTTP request smuggling occurs when there is a discrepancy in how a front-end proxy and a back-end server interpret the boundaries of an HTTP request.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

HTTP Request/Response Smuggling

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:54538
ALSA-2026:54541
ALSA-2026:54542
ALSA-2026:54550
ALSA-2026:54574
ALSA-2026:54590
ALSA-2026:55856
ALSA-2026:55857
ALSA-2026:55858
BIT-DOTNET-2026-62899
BIT-DOTNET-SDK-2026-62899
CVE-2026-62899
GHSA-R6MH-95JW-G7QG
RHSA-2026:44914
RHSA-2026:54538
RHSA-2026:54541
RHSA-2026:54542
RHSA-2026:54550
RHSA-2026:54574
RHSA-2026:54590
RHSA-2026:55142
RHSA-2026:55405
RHSA-2026:55856
RHSA-2026:55857
RHSA-2026:55858
USN-8641-1

Affected Products

.Net Framework
Linuxmint
Rocky Linux
Ubuntu