CVE-2026-65370

HighCVSS 7.5

Published: 12/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.

Risk Assessment

Request smuggling attacks could allow manipulation of HTTP requests, potentially leading to unauthorized access or cache poisoning.

Recommendation

Upgrade ServiceTalk to version 0.42.65 or later to remediate the vulnerability.

Original NVD description (English source)

ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65.