CVE-2026-91096 | Facebook Proxygen 2024.10.28.00 WebTransport Session Streams terminateSessionStreams use after free

September 28, 2026 Yanac

A vulnerability was found in Facebook Proxygen 2024.10.28.00. It has been declared as critical. This impacts the function WebTransportImpl::terminateSessionStreams of the component WebTransport Session Streams. Such manipulation leads to use after free.

This vulnerability is referenced as CVE-2026-91096. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More