HTTP request smuggling

Everything Patch Gazette has reported about HTTP request smuggling: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Eclipse Vert.x HTTP Decoder Flaw Enables Request Smuggling in 5.0, 5.1, and 5.2 Branches

A high-severity vulnerability in Eclipse Vert.x allows attackers to smuggle HTTP requests by exploiting header canonicalization flaws in recent versions.

Oct 16, 2026

Vulnerabilities

Microsoft patches Kestrel HTTP smuggling flaw CVE-2026-88092 for ASP.NET Core 8-11 on all platforms

Critical CVE-2026-88092 allows network tampering via Kestrel. Patches are now available for versions 8, 9, 10, and 11 across Windows, Linux, and macOS.

Oct 13, 2026