CVE-2026-59724High· 7.5▾ TwilightSocket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as __proto__ through an inherited property of th…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.6%
Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as proto through an inherited property of the clients object during WebTransport upgrade handling, causing a TypeError and denial of service. This issue is fixed in version 6.6.7.
engine.io >= 6.5.0, < 6.6.7Upgrade past the affected range:
engine.io 6.6.7Connected by shared product, vendor, weakness, or advisory.
CVE-2026-59725High· 7.5Socket.IO enables bidirectional and low-latency communication for every platform
CVE-2026-102599High· 7.5Socket.IO enables bidirectional and low-latency communication for every platform
CVE-2024-57936Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now
CVE-2024-56624High· 7.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix out_fput in iommufd_fault_alloc() As fput() calls the file->f_op->release op, where fault obj and ictx are getting released, there is no need to release t…
CVE-2021-4454High· 7.5In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate The conclusion "j1939_session_deactivate() should be called with a session ref-count of at least 2" is …
CVE-2024-46865Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first