CVE-2026-123318 | JetBrains Ktor up to 3.6.0 CIO Engine request smuggling

November 6, 2026 Yanac

A vulnerability was found in JetBrains Ktor up to 3.6.0. It has been declared as problematic. Affected by this issue is some unknown functionality of the component CIO Engine. The manipulation results in http request smuggling.

This vulnerability is known as CVE-2026-123318. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More