CVE-2026-62966 | ESP32Async ESPAsyncWebServer up to 3.11.1 Multipart Parser src/WebRequest.cpp null pointer dereference

October 30, 2026 Yanac

A vulnerability was found in ESP32Async ESPAsyncWebServer up to 3.11.1. It has been classified as problematic. The affected element is an unknown function of the file src/WebRequest.cpp of the component Multipart Parser. The manipulation leads to null pointer dereference.

This vulnerability is listed as CVE-2026-62966. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More