CVE-2026-37236 | grpc-ecosystem grpc-gateway 2.28.0 Method Override ServeMux.ServeHTTP X-HTTP-Method-Override access control

A vulnerability has been found in grpc-ecosystem grpc-gateway 2.28.0 and classified as critical. This impacts the function ServeMux.ServeHTTP of the component Method Override Handler. Performing a manipulation of the argument X-HTTP-Method-Override results in improper access controls.

This vulnerability is known as CVE-2026-37236. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More