CVE-2026-55612 | OpenWrt uhttpd Keep-Alive Parser client.c client_poll_post_data content_length/transfer_chunked request smuggling

October 31, 2026 Yanac

A vulnerability described as problematic has been identified in OpenWrt uhttpd. Impacted is the function client_poll_post_data of the file client.c of the component Keep-Alive Parser. Such manipulation of the argument content_length/transfer_chunked leads to http request smuggling.

This vulnerability is traded as CVE-2026-55612. The attack may be launched remotely. There is no exploit available.

A patch should be applied to remediate this issue.VulDB Recent EntriesRead More