CVE-2026-111103 | mtrudel bandit up to 1.13.9 HTTP/2 Bandit.HTTP/2.Handler.handle_data state issue

October 26, 2026 Yanac

A vulnerability has been found in mtrudel bandit up to 1.13.9 and classified as critical. The affected element is the function Bandit.HTTP2.Handler.handle_data of the component HTTP2 Handler. The manipulation leads to state issue.

This vulnerability is listed as CVE-2026-111103. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More