CVE-2026-43966: HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Jun
Released
2026-06-19
Last Updated
2026-08-13
EPSS Score
0.31% (percentile: 23.8%)

Affected Products (3)

Open Source Software

  • azl3 rabbitmq-server 3.13.7-5 on Azure Linux 3.0
  • azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0

Other

  • 21657-17084

Revision History

  • 2026-06-19: Information published.
  • 2026-06-28: Information published.
  • 2026-07-15: Information published.
  • 2026-08-13: Information published.