libwebsockets CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL libwebsockets CVE published 2026-09-15

CVE-2026-19773

libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability. The vulnerability exists due to improper validation of user-supplied data, which can lead to a write past the end of an allocated [truncated]