CVE-2026-34441Medium· 4.8▾ Sunlitcpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static file handler serves GET responses without consuming the r…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 26.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.3%
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.40.0, cpp-httplib is vulnerable to HTTP Request Smuggling. The server's static file handler serves GET responses without consuming the request body. On HTTP/1.1 keep-alive connections, the unread body bytes remain on the TCP stream and are interpreted as the start of a new HTTP request. An attacker can embed an arbitrary HTTP request inside the body of a GET request, which the server processes as a separate request. This issue has been patched in version 0.40.0.
cpp-httplib < 0.40.0Upgrade past the affected range:
cpp-httplib 0.40.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102944High· 7.5cpp-httplib is a C++ header-only HTTP/HTTPS library
CVE-2026-103930Low· 3.7cpp-httplib is a C++ header-only HTTP/HTTPS library
CVE-2023-41265Critical· 9.6An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier all…
CVE-2026-118264CriticalEcho: Rejected WebSocket upgrades can bypass Echo route-level access controls
CVE-2026-55458LowCaddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
CVE-2026-103995Low· 2.0Lenient parsing of integers for response body and chunk framing