CVE-2026-43966: HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

Overview

Severity
N/A
Exploit Status
Not Exploited
Patch Tuesday
2026-Jun
Released
2026-06-19
Last Updated
2026-08-13
EPSS Score
0.43% (percentile: 35.1%)

Affected Products (3)

Other

  • 21394-17084
  • 21487-17084
  • 21657-17084

Revision History

  • 2026-06-19: Information published.
  • 2026-06-28: Information published.
  • 2026-07-15: Information published.
  • 2026-08-13: Information published.