CVE-2026-86249 | Apache bRPC up to 1.17.x HTTP built-in service VerifyHttpRequest improper authentication

October 21, 2026 Yanac

A vulnerability has been found in Apache bRPC up to 1.17.x and classified as critical. Affected by this issue is the function VerifyHttpRequest of the component HTTP built-in service. This manipulation causes improper authentication.

This vulnerability is tracked as CVE-2026-86249. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More