CVE-2026-66752 | tiny-http up to 0.12.0 Transfer-Encoding Parser request smuggling

July 28, 2026 Yanac

A vulnerability classified as problematic has been found in tiny-http up to 0.12.0. Affected is an unknown function of the component Transfer-Encoding Parser. The manipulation leads to http request smuggling.

This vulnerability is documented as CVE-2026-66752. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More