PT-2026-76774
CVE-2026-68005
·
Published
2026-08-17
·
Updated
2026-10-23
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ACME mini httpd versions prior to 1.31
Description
A remote attacker can cause a denial of service through the HTTP request header parser within the
handle request() function.Recommendations
Update ACME mini httpd to version 1.31 or later.
As a temporary workaround, restrict access to the
handle request() function to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾