CVE-2026-78667 | Go net-http up to 1.26.8/1.27.1 FileServer/ServeContent/ServeFile allocation of resources

October 9, 2026 Yanac

A vulnerability classified as problematic was found in Go net-http up to 1.26.8/1.27.1. Affected by this issue is the function FileServer/ServeContent/ServeFile. Executing a manipulation can lead to allocation of resources.

This vulnerability is tracked as CVE-2026-78667. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More