CVE-2026-103471

HighCVSS 7.5

Published: 30/09/2026(UTC)Updated: 30/09/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.79%

55th percentile - higher than 55% of all known CVEs

Summary

restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit. A remote unauthenticated attacker can open a TCP connection and stream bytes indefinitely without sending the header delimiter, forcing the server to allocate unbounded heap memory until the process is killed.

Risk Assessment

An attacker can cause memory exhaustion (DoS) on the server without authentication, leading to service unavailability or process crash.

Recommendation

Update restbed to a version that enforces header size limits, or apply limits at the reverse proxy level (e.g., header size limits and timeouts).

Other vulnerabilities in restbed

CVE-2026-103472High
restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to exhaust server memory, causing denial of service through process crash.

Original NVD description (English source)

restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticated attackers to exhaust server memory. Attackers can open TCP connections and stream bytes indefinitely without sending the header delimiter, forcing the server to allocate unbounded heap memory until the process is killed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS