Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-9375 (GCVE-0-2026-9375)
Vulnerability from cvelistv5 – Published: 2026-06-19 18:45 – Updated: 2026-08-13 14:39This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2026-08-13T14:39:11.942Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntr_ai"
},
"rejectedReasons": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"value": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntr_ai",
"cveId": "CVE-2026-9375",
"datePublished": "2026-06-19T18:45:10.409Z",
"dateRejected": "2026-08-13T14:39:11.942Z",
"dateReserved": "2026-05-23T14:33:21.716Z",
"dateUpdated": "2026-08-13T14:39:11.942Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-9375",
"date": "2026-08-13",
"epss": "0.00304",
"percentile": "0.22863"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-9375\",\"sourceIdentifier\":\"security@huntr.dev\",\"published\":\"2026-06-19T19:16:36.947\",\"lastModified\":\"2026-08-13T15:20:22.540\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}],\"metrics\":{},\"references\":[]}}",
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-08-14T01:02:57Z",
"cve": "CVE-2026-9375",
"id": "CVE-2026-9375",
"initial_release_date": "2026-06-23T02:30:48Z",
"product_status:known_affected": "394",
"product_status:known_not_affected": "114",
"product_status:recommended": "18",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-9375",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-9375.json",
"version": "10"
},
"vulnrichment": {
"containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"c09c270a-b464-47c1-9133-acb35b22c19a\", \"shortName\": \"@huntr_ai\", \"dateUpdated\": \"2026-08-13T14:39:11.942Z\"}, \"rejectedReasons\": [{\"lang\": \"en\", \"value\": \"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\"}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-9375\", \"assignerOrgId\": \"c09c270a-b464-47c1-9133-acb35b22c19a\", \"state\": \"REJECTED\", \"assignerShortName\": \"@huntr_ai\", \"dateReserved\": \"2026-05-23T14:33:21.716Z\", \"datePublished\": \"2026-06-19T18:45:10.409Z\", \"dateUpdated\": \"2026-08-13T14:39:11.942Z\", \"dateRejected\": \"2026-08-13T14:39:11.942Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-1032
Vulnerability from certfr_avis - Published: 2026-08-14 - Updated: 2026-08-14
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | WebSphere | WebSphere Application Server versions 9.x antérieures à 9.0.5.29 | ||
| IBM | WebSphere | WebSphere Application Server Liberty versions antérieures à 26.0.0.9 | ||
| IBM | QRadar | QRadar App SDK versions antérieures à 2.2.6 | ||
| IBM | Db2 | Db2 version 12.1 sans les derniers correctifs de sécurité | ||
| IBM | Db2 | Db2 versions 11.5 sans les derniers correctifs de sécurité | ||
| IBM | WebSphere | WebSphere eXtreme Scale versions 8.6.2.x antérieures à 8.6.2.2 et sans le correctif PH72363 iFix | ||
| IBM | WebSphere | WebSphere Service Registry and Repository Studio versions antérieures à V8.5.6.3_IJ59344 |
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "WebSphere Application Server versions 9.x ant\u00e9rieures \u00e0 9.0.5.29",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.9",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar App SDK versions ant\u00e9rieures \u00e0 2.2.6",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Db2 version 12.1 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Db2 versions 11.5 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere eXtreme Scale versions 8.6.2.x ant\u00e9rieures \u00e0 8.6.2.2 et sans le correctif PH72363 iFix",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Service Registry and Repository Studio versions ant\u00e9rieures \u00e0 V8.5.6.3_IJ59344",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-5588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
},
{
"name": "CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"name": "CVE-2026-41254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41254"
},
{
"name": "CVE-2026-44405",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44405"
},
{
"name": "CVE-2026-32990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32990"
},
{
"name": "CVE-2026-50645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50645"
},
{
"name": "CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"name": "CVE-2026-50560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50560"
},
{
"name": "CVE-2025-66614",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66614"
},
{
"name": "CVE-2026-33940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33940"
},
{
"name": "CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"name": "CVE-2026-16243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16243"
},
{
"name": "CVE-2026-9171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9171"
},
{
"name": "CVE-2026-47010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47010"
},
{
"name": "CVE-2026-11906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11906"
},
{
"name": "CVE-2026-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
},
{
"name": "CVE-2026-47057",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47057"
},
{
"name": "CVE-2026-29145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29145"
},
{
"name": "CVE-2026-14525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14525"
},
{
"name": "CVE-2026-42580",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42580"
},
{
"name": "CVE-2026-18499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18499"
},
{
"name": "CVE-2026-5516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5516"
},
{
"name": "CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"name": "CVE-2026-33941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33941"
},
{
"name": "CVE-2026-7246",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7246"
},
{
"name": "CVE-2023-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
},
{
"name": "CVE-2026-42585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42585"
},
{
"name": "CVE-2026-11541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
},
{
"name": "CVE-2026-11546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11546"
},
{
"name": "CVE-2021-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
},
{
"name": "CVE-2026-29146",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29146"
},
{
"name": "CVE-2026-10534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10534"
},
{
"name": "CVE-2026-10109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10109"
},
{
"name": "CVE-2026-45409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45409"
},
{
"name": "CVE-2026-25645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25645"
},
{
"name": "CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"name": "CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"name": "CVE-2026-4410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4410"
},
{
"name": "CVE-2026-45149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
},
{
"name": "CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"name": "CVE-2026-9375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9375"
},
{
"name": "CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"name": "CVE-2026-35091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35091"
},
{
"name": "CVE-2026-8646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8646"
},
{
"name": "CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"name": "CVE-2026-33939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33939"
},
{
"name": "CVE-2026-9320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9320"
},
{
"name": "CVE-2026-9762",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9762"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2026-34479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
},
{
"name": "CVE-2026-47027",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47027"
},
{
"name": "CVE-2026-47058",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47058"
},
{
"name": "CVE-2026-16441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16441"
},
{
"name": "CVE-2026-9002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9002"
},
{
"name": "CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"name": "CVE-2026-50020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50020"
},
{
"name": "CVE-2026-57819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-57819"
},
{
"name": "CVE-2026-42578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42578"
},
{
"name": "CVE-2026-2950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2950"
},
{
"name": "CVE-2026-33916",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33916"
},
{
"name": "CVE-2026-47063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47063"
},
{
"name": "CVE-2026-22021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
},
{
"name": "CVE-2026-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
},
{
"name": "CVE-2026-10543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10543"
},
{
"name": "CVE-2026-47021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47021"
},
{
"name": "CVE-2026-64958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64958"
},
{
"name": "CVE-2026-35092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35092"
},
{
"name": "CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"name": "CVE-2026-25854",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25854"
},
{
"name": "CVE-2026-46968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46968"
},
{
"name": "CVE-2026-16956",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16956"
},
{
"name": "CVE-2025-36372",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36372"
},
{
"name": "CVE-2026-33937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33937"
},
{
"name": "CVE-2026-10695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10695"
},
{
"name": "CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"name": "CVE-2026-16439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16439"
},
{
"name": "CVE-2026-29129",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29129"
},
{
"name": "CVE-2026-11714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11714"
},
{
"name": "CVE-2026-41417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41417"
},
{
"name": "CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"name": "CVE-2026-9322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9322"
},
{
"name": "CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"name": "CVE-2026-9563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9563"
},
{
"name": "CVE-2026-47244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47244"
},
{
"name": "CVE-2026-7771",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7771"
},
{
"name": "CVE-2026-8400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8400"
},
{
"name": "CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"name": "CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"name": "CVE-2024-3651",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-3651"
},
{
"name": "CVE-2026-33938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33938"
},
{
"name": "CVE-2026-54225",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54225"
},
{
"name": "CVE-2026-9071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9071"
},
{
"name": "CVE-2026-11806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11806"
},
{
"name": "CVE-2026-34477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
},
{
"name": "CVE-2026-60147",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60147"
},
{
"name": "CVE-2025-14813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
},
{
"name": "CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"name": "CVE-2026-10535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10535"
},
{
"name": "CVE-2026-47059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47059"
}
],
"initial_release_date": "2026-08-14T00:00:00",
"last_revision_date": "2026-08-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1032",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-08-11",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7283290",
"url": "https://www.ibm.com/support/pages/node/7283290"
},
{
"published_at": "2026-08-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7282872",
"url": "https://www.ibm.com/support/pages/node/7282872"
},
{
"published_at": "2026-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7283489",
"url": "https://www.ibm.com/support/pages/node/7283489"
},
{
"published_at": "2026-08-10",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7282868",
"url": "https://www.ibm.com/support/pages/node/7282868"
},
{
"published_at": "2026-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7283567",
"url": "https://www.ibm.com/support/pages/node/7283567"
},
{
"published_at": "2026-08-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7282947",
"url": "https://www.ibm.com/support/pages/node/7282947"
},
{
"published_at": "2026-08-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7282946",
"url": "https://www.ibm.com/support/pages/node/7282946"
},
{
"published_at": "2026-08-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7282949",
"url": "https://www.ibm.com/support/pages/node/7282949"
},
{
"published_at": "2026-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277422",
"url": "https://www.ibm.com/support/pages/node/7277422"
},
{
"published_at": "2026-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7283488",
"url": "https://www.ibm.com/support/pages/node/7283488"
},
{
"published_at": "2026-08-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279461",
"url": "https://www.ibm.com/support/pages/node/7279461"
}
]
}
FKIE_CVE-2026-9375
Vulnerability from fkie_nvd - Published: 2026-06-19 19:16 - Updated: 2026-08-13 15:20| URL | Tags |
|---|
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"id": "CVE-2026-9375",
"lastModified": "2026-08-13T15:20:22.540",
"metrics": {},
"published": "2026-06-19T19:16:36.947",
"references": [],
"sourceIdentifier": "security@huntr.dev",
"vulnStatus": "Rejected"
}
GHSA-MWQ6-FG78-P6CQ
Vulnerability from github – Published: 2026-06-19 21:32 – Updated: 2026-06-19 21:32urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (preload_content=False) when using Brotli support. The issue arises due to three independent code paths in response.py that bypass the max_length protection introduced in version 2.6.0 to mitigate CVE-2025-66471. Specifically, negative max_length values can be produced due to buffer arithmetic in read(), flush_decoder unconditionally overrides max_length to -1, and _flush_decoder() passes no limit at all, defaulting to unlimited decompression. This allows a malicious HTTP server to trigger an out-of-memory (OOM) condition by decompressing large payloads into memory, leading to a denial of service (DoS). The vulnerability affects urllib3 2.6.3 and Brotli 1.2.0 and impacts applications and libraries using requests or urllib3 to stream content from untrusted sources.
{
"affected": [],
"aliases": [
"CVE-2026-9375"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-06-19T19:16:36Z",
"severity": "HIGH"
},
"details": "urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when using Brotli support. The issue arises due to three independent code paths in `response.py` that bypass the `max_length` protection introduced in version 2.6.0 to mitigate CVE-2025-66471. Specifically, negative `max_length` values can be produced due to buffer arithmetic in `read()`, `flush_decoder` unconditionally overrides `max_length` to `-1`, and `_flush_decoder()` passes no limit at all, defaulting to unlimited decompression. This allows a malicious HTTP server to trigger an out-of-memory (OOM) condition by decompressing large payloads into memory, leading to a denial of service (DoS). The vulnerability affects urllib3 2.6.3 and Brotli 1.2.0 and impacts applications and libraries using `requests` or `urllib3` to stream content from untrusted sources.",
"id": "GHSA-mwq6-fg78-p6cq",
"modified": "2026-06-19T21:32:48Z",
"published": "2026-06-19T21:32:48Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9375"
},
{
"type": "WEB",
"url": "https://github.com/urllib3/urllib3/commit/2bdcc44d1e163fb5cc48a8662425e35e15adfe6a"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/ddd09eb9-b87d-4a43-84df-48837b1bbc23"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
ubuntu-cve-2026-9375
Vulnerability from osv_ubuntu
urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (preload_content=False) when using Brotli support. The issue arises due to three independent code paths in response.py that bypass the max_length protection introduced in version 2.6.0 to mitigate CVE-2025-66471. Specifically, negative max_length values can be produced due to buffer arithmetic in read(), flush_decoder unconditionally overrides max_length to -1, and _flush_decoder() passes no limit at all, defaulting to unlimited decompression. This allows a malicious HTTP server to trigger an out-of-memory (OOM) condition by decompressing large payloads into memory, leading to a denial of service (DoS). The vulnerability affects urllib3 2.6.3 and Brotli 1.2.0 and impacts applications and libraries using requests or urllib3 to stream content from untrusted sources.
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pip",
"binary_version": "1.5.4-1ubuntu4+esm5"
},
{
"binary_name": "python-pip-whl",
"binary_version": "1.5.4-1ubuntu4+esm5"
},
{
"binary_name": "python3-pip",
"binary_version": "1.5.4-1ubuntu4+esm5"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@1.5.4-1ubuntu4+esm5?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.4.1-2",
"1.5.4-1",
"1.5.4-1ubuntu1",
"1.5.4-1ubuntu3",
"1.5.4-1ubuntu4",
"1.5.4-1ubuntu4+esm1",
"1.5.4-1ubuntu4+esm2",
"1.5.4-1ubuntu4+esm3",
"1.5.4-1ubuntu4+esm4",
"1.5.4-1ubuntu4+esm5"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-urllib3",
"binary_version": "1.7.1-1ubuntu4.1+esm1"
},
{
"binary_name": "python-urllib3-whl",
"binary_version": "1.7.1-1ubuntu4.1+esm1"
},
{
"binary_name": "python3-urllib3",
"binary_version": "1.7.1-1ubuntu4.1+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@1.7.1-1ubuntu4.1+esm1?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.6-2",
"1.7.1-1",
"1.7.1-1build1",
"1.7.1-1ubuntu0.1",
"1.7.1-1ubuntu3",
"1.7.1-1ubuntu4",
"1.7.1-1ubuntu4.1",
"1.7.1-1ubuntu4.1+esm1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-urllib3",
"binary_version": "1.13.1-2ubuntu0.16.04.4+esm3"
},
{
"binary_name": "python3-urllib3",
"binary_version": "1.13.1-2ubuntu0.16.04.4+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@1.13.1-2ubuntu0.16.04.4+esm3?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.11-1",
"1.12-1",
"1.13.1-1",
"1.13.1-2",
"1.13.1-2ubuntu0.16.04.1",
"1.13.1-2ubuntu0.16.04.2",
"1.13.1-2ubuntu0.16.04.3",
"1.13.1-2ubuntu0.16.04.4",
"1.13.1-2ubuntu0.16.04.4+esm1",
"1.13.1-2ubuntu0.16.04.4+esm2",
"1.13.1-2ubuntu0.16.04.4+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pip",
"binary_version": "8.1.1-2ubuntu0.6+esm12"
},
{
"binary_name": "python-pip-whl",
"binary_version": "8.1.1-2ubuntu0.6+esm12"
},
{
"binary_name": "python3-pip",
"binary_version": "8.1.1-2ubuntu0.6+esm12"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@8.1.1-2ubuntu0.6+esm12?arch=source\u0026distro=esm-apps/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.5.6-7ubuntu1",
"1.5.6-7ubuntu2",
"8.0.2-7",
"8.0.3-1",
"8.0.3-2",
"8.1.0-1",
"8.1.0-2",
"8.1.1-1",
"8.1.1-2",
"8.1.1-2ubuntu0.1",
"8.1.1-2ubuntu0.2",
"8.1.1-2ubuntu0.4",
"8.1.1-2ubuntu0.6",
"8.1.1-2ubuntu0.6+esm2",
"8.1.1-2ubuntu0.6+esm3",
"8.1.1-2ubuntu0.6+esm4",
"8.1.1-2ubuntu0.6+esm5",
"8.1.1-2ubuntu0.6+esm6",
"8.1.1-2ubuntu0.6+esm8",
"8.1.1-2ubuntu0.6+esm10",
"8.1.1-2ubuntu0.6+esm11",
"8.1.1-2ubuntu0.6+esm12"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-urllib3",
"binary_version": "1.22-1ubuntu0.18.04.2+esm3"
},
{
"binary_name": "python3-urllib3",
"binary_version": "1.22-1ubuntu0.18.04.2+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@1.22-1ubuntu0.18.04.2+esm3?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.21.1-1",
"1.22-1",
"1.22-1ubuntu0.18.04.1",
"1.22-1ubuntu0.18.04.2",
"1.22-1ubuntu0.18.04.2+esm1",
"1.22-1ubuntu0.18.04.2+esm2",
"1.22-1ubuntu0.18.04.2+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pip",
"binary_version": "9.0.1-2.3~ubuntu1.18.04.8+esm8"
},
{
"binary_name": "python-pip-whl",
"binary_version": "9.0.1-2.3~ubuntu1.18.04.8+esm8"
},
{
"binary_name": "python3-pip",
"binary_version": "9.0.1-2.3~ubuntu1.18.04.8+esm8"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@9.0.1-2.3~ubuntu1.18.04.8+esm8?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"9.0.1-2",
"9.0.1-2.3~ubuntu1",
"9.0.1-2.3~ubuntu1.18.04.1",
"9.0.1-2.3~ubuntu1.18.04.2",
"9.0.1-2.3~ubuntu1.18.04.3",
"9.0.1-2.3~ubuntu1.18.04.4",
"9.0.1-2.3~ubuntu1.18.04.5",
"9.0.1-2.3~ubuntu1.18.04.5+esm2",
"9.0.1-2.3~ubuntu1.18.04.5+esm3",
"9.0.1-2.3~ubuntu1.18.04.6",
"9.0.1-2.3~ubuntu1.18.04.6+esm1",
"9.0.1-2.3~ubuntu1.18.04.7",
"9.0.1-2.3~ubuntu1.18.04.7+esm1",
"9.0.1-2.3~ubuntu1.18.04.8",
"9.0.1-2.3~ubuntu1.18.04.8+esm1",
"9.0.1-2.3~ubuntu1.18.04.8+esm2",
"9.0.1-2.3~ubuntu1.18.04.8+esm4",
"9.0.1-2.3~ubuntu1.18.04.8+esm6",
"9.0.1-2.3~ubuntu1.18.04.8+esm7",
"9.0.1-2.3~ubuntu1.18.04.8+esm8"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-urllib3",
"binary_version": "1.25.8-2ubuntu0.4+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@1.25.8-2ubuntu0.4+esm4?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.24.1-1ubuntu1",
"1.24.1-1ubuntu2",
"1.25.8-1",
"1.25.8-2",
"1.25.8-2ubuntu0.1",
"1.25.8-2ubuntu0.2",
"1.25.8-2ubuntu0.3",
"1.25.8-2ubuntu0.4",
"1.25.8-2ubuntu0.4+esm1",
"1.25.8-2ubuntu0.4+esm2",
"1.25.8-2ubuntu0.4+esm3",
"1.25.8-2ubuntu0.4+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pip-whl",
"binary_version": "20.0.2-5ubuntu1.11+esm4"
},
{
"binary_name": "python3-pip",
"binary_version": "20.0.2-5ubuntu1.11+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@20.0.2-5ubuntu1.11+esm4?arch=source\u0026distro=esm-apps/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"18.1-5",
"18.1-5build1",
"18.1-5ubuntu1",
"20.0.2-2",
"20.0.2-4",
"20.0.2-5",
"20.0.2-5ubuntu1",
"20.0.2-5ubuntu1.1",
"20.0.2-5ubuntu1.3",
"20.0.2-5ubuntu1.4",
"20.0.2-5ubuntu1.5",
"20.0.2-5ubuntu1.6",
"20.0.2-5ubuntu1.7",
"20.0.2-5ubuntu1.8",
"20.0.2-5ubuntu1.9",
"20.0.2-5ubuntu1.10",
"20.0.2-5ubuntu1.10+esm2",
"20.0.2-5ubuntu1.11",
"20.0.2-5ubuntu1.11+esm2",
"20.0.2-5ubuntu1.11+esm3",
"20.0.2-5ubuntu1.11+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-urllib3",
"binary_version": "1.26.5-1~exp1ubuntu0.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@1.26.5-1~exp1ubuntu0.7?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.26.5-1~exp1",
"1.26.5-1~exp1ubuntu0.1",
"1.26.5-1~exp1ubuntu0.2",
"1.26.5-1~exp1ubuntu0.3",
"1.26.5-1~exp1ubuntu0.4",
"1.26.5-1~exp1ubuntu0.5",
"1.26.5-1~exp1ubuntu0.6",
"1.26.5-1~exp1ubuntu0.7"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pip",
"binary_version": "22.0.2+dfsg-1ubuntu0.7+esm3"
},
{
"binary_name": "python3-pip-whl",
"binary_version": "22.0.2+dfsg-1ubuntu0.7+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:22.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@22.0.2+dfsg-1ubuntu0.7+esm3?arch=source\u0026distro=esm-apps/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"20.3.4-4",
"21.3.1+dfsg-3",
"22.0.2+dfsg-1",
"22.0.2+dfsg-1ubuntu0.1",
"22.0.2+dfsg-1ubuntu0.2",
"22.0.2+dfsg-1ubuntu0.3",
"22.0.2+dfsg-1ubuntu0.4",
"22.0.2+dfsg-1ubuntu0.5",
"22.0.2+dfsg-1ubuntu0.6",
"22.0.2+dfsg-1ubuntu0.7",
"22.0.2+dfsg-1ubuntu0.7+esm1",
"22.0.2+dfsg-1ubuntu0.7+esm2",
"22.0.2+dfsg-1ubuntu0.7+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-urllib3",
"binary_version": "2.0.7-1ubuntu0.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@2.0.7-1ubuntu0.7?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.26.16-1",
"1.26.18-1",
"2.0.7-1",
"2.0.7-1ubuntu0.1",
"2.0.7-1ubuntu0.2",
"2.0.7-1ubuntu0.3",
"2.0.7-1ubuntu0.4",
"2.0.7-1ubuntu0.5",
"2.0.7-1ubuntu0.6",
"2.0.7-1ubuntu0.7"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pip",
"binary_version": "24.0+dfsg-1ubuntu1.3+esm3"
},
{
"binary_name": "python3-pip-whl",
"binary_version": "24.0+dfsg-1ubuntu1.3+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:24.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@24.0+dfsg-1ubuntu1.3+esm3?arch=source\u0026distro=esm-apps/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"23.2+dfsg-1",
"23.3+dfsg-1",
"24.0+dfsg-1",
"24.0+dfsg-1ubuntu1",
"24.0+dfsg-1ubuntu1.1",
"24.0+dfsg-1ubuntu1.2",
"24.0+dfsg-1ubuntu1.3",
"24.0+dfsg-1ubuntu1.3+esm1",
"24.0+dfsg-1ubuntu1.3+esm2",
"24.0+dfsg-1ubuntu1.3+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pip",
"binary_version": "25.1.1+dfsg-1ubuntu2"
},
{
"binary_name": "python3-pip-whl",
"binary_version": "25.1.1+dfsg-1ubuntu2"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@25.1.1+dfsg-1ubuntu2?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"25.0+dfsg-1",
"25.1.1+dfsg-1",
"25.1.1+dfsg-1ubuntu1",
"25.1.1+dfsg-1ubuntu2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-urllib3",
"binary_version": "2.3.0-3ubuntu0.6"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@2.3.0-3ubuntu0.6?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.3.0-2",
"2.3.0-2ubuntu1",
"2.3.0-3",
"2.3.0-3ubuntu0.1",
"2.3.0-3ubuntu0.2",
"2.3.0-3ubuntu0.3",
"2.3.0-3ubuntu0.4",
"2.3.0-3ubuntu0.6"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-urllib3",
"binary_version": "2.6.3-1ubuntu1.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "python-urllib3",
"purl": "pkg:deb/ubuntu/python-urllib3@2.6.3-1ubuntu1.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.3.0-3",
"2.5.0-1",
"2.5.0-1ubuntu1",
"2.5.0-1ubuntu2",
"2.6.3-1ubuntu1",
"2.6.3-1ubuntu1.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pip",
"binary_version": "25.1.1+dfsg-1ubuntu2+esm3"
},
{
"binary_name": "python3-pip-whl",
"binary_version": "25.1.1+dfsg-1ubuntu2+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:26.04:LTS",
"name": "python-pip",
"purl": "pkg:deb/ubuntu/python-pip@25.1.1+dfsg-1ubuntu2+esm3?arch=source\u0026distro=esm-apps/resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"25.1.1+dfsg-1ubuntu2",
"25.1.1+dfsg-1ubuntu2+esm1",
"25.1.1+dfsg-1ubuntu2+esm2",
"25.1.1+dfsg-1ubuntu2+esm3"
]
}
],
"aliases": [],
"details": "urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when using Brotli support. The issue arises due to three independent code paths in `response.py` that bypass the `max_length` protection introduced in version 2.6.0 to mitigate CVE-2025-66471. Specifically, negative `max_length` values can be produced due to buffer arithmetic in `read()`, `flush_decoder` unconditionally overrides `max_length` to `-1`, and `_flush_decoder()` passes no limit at all, defaulting to unlimited decompression. This allows a malicious HTTP server to trigger an out-of-memory (OOM) condition by decompressing large payloads into memory, leading to a denial of service (DoS). The vulnerability affects urllib3 2.6.3 and Brotli 1.2.0 and impacts applications and libraries using `requests` or `urllib3` to stream content from untrusted sources.",
"id": "UBUNTU-CVE-2026-9375",
"modified": "2026-07-07T19:08:33Z",
"published": "2026-06-19T19:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-9375"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9375"
},
{
"type": "REPORT",
"url": "https://huntr.com/bounties/ddd09eb9-b87d-4a43-84df-48837b1bbc23"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-9375"
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.