CVE-2026-114348 | webpack webpack-dev-server up to 5.2.6/6.0.x Open-Editor Endpoint Host incorrect regex

October 22, 2026 Yanac

A vulnerability was found in webpack webpack-dev-server up to 5.2.6/6.0.x. It has been declared as problematic. This issue affects some unknown processing of the component Open-Editor Endpoint. Executing a manipulation of the argument Host can lead to incorrect regular expression.

This vulnerability is tracked as CVE-2026-114348. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More