Read the docs

libwebsockets

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

libwebsockets records in CISA KEV

No libwebsockets vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-16038 CVE-2026-19773 · GHSA-r4m8-276f-3r2f

Out-of-bounds write in libwebsockets

Priority MEDIUM 50

libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00646 Published 2026-09-15 No fix listed CWE-787
Priority LOW 39

libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00842 Published 2026-11-03 No fix listed CWE-787
Open these records in search →