As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-102479: Request smuggling in Eclipse Vert.x HTTP/1.x decoder
CVE-2026-102479 is a request smuggling vulnerability in Eclipse Vert.x HTTP/1.x decoder with a CVSS score of 8.7. The vulnerability affects vertx-core across three minor release branches, though the exploitation window is limited. A security advisory and technical analysis from JFrog document the flaw and its potential attack vectors.
Why it matters: Organizations using Eclipse Vert.x in production need to assess whether they run affected versions and apply patches promptly, given the moderate-to-high severity and the request smuggling risk to backend systems.
- Source published
- First seen by Cybersecurity Tracker