Medium CVE-2026-43972 Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. In gun_http2:push_promise_frame/7, the :authority pseudo-header from an incoming PUSH_PROMISE frame is stored verbatim...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-43972 – Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows...

VERWANDTEARTIKEL

Check Point VPN 0-day Vulnerability Exploited in the Wild to Deploy Ransomware

CVE-2026-25555 - OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

CVE-2026-25559 - OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint

CVE-2026-25856 - OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

CVE-2026-25855 - OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

CVE-2026-49755 - Decompression bomb DoS in Req via auto-decoded archive and compressed response bodies