CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:23 AM ET)

What this means for you

This week: 3,171 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,171; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 10; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product yhirose:cpp-httplib. Show all products

15 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2026-54919	High 7.4	cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends Assigned by GitHub_M	Jul 10, 2026
CVE-2026-45372	Critical 9.9	cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection Assigned by GitHub_M	May 29, 2026
CVE-2026-46527	High 8.7	cpp-httplib: Malicious `X-Forwarded-For` Under Trusted-Proxy Configuration Triggers Empty `vector::front()`, Leading to Undefined Behavior and Server Crash Assigned by GitHub_M	May 29, 2026
CVE-2026-45352	Medium 5.3	cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding Assigned by GitHub_M	May 29, 2026
CVE-2026-34441	Medium 4.8	cpp-httplib: HTTP Request Smuggling via Unconsumed GET Request Body Assigned by GitHub_M	Mar 31, 2026
CVE-2026-33745	High 7.4	cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect Assigned by GitHub_M	Mar 26, 2026
CVE-2026-32627	High 8.7	cpp-httplib has a Silent TLS Certificate Verification Bypass on HTTPS Redirect via Proxy Assigned by GitHub_M	Mar 13, 2026
CVE-2026-31870	High 7.5	cpp-httplib Affected by Remote Process Crash via Malformed Content-Length Response Header Assigned by GitHub_M	Mar 11, 2026
CVE-2026-29076	Medium 5.9	cpp-httplib: Stack Overflow Denial of Service (DoS) via std::regex in multipart filename parsing Assigned by GitHub_M	Mar 7, 2026
CVE-2026-28435	High 7.5	Payload size limit bypass via gzip decompression in ContentReader (streaming) allows oversized request bodies in cpp-httplib Assigned by GitHub_M	Mar 4, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.