{"id":"EUVD-2026-42312","enisaUuid":"18b362b6-44c6-351f-abcf-9542753e8d1b","description":"Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as __proto__ through an inherited property of the clients object during WebTransport upgrade handling, causing a TypeError and denial of service. This issue is fixed in version 6.6.7.","datePublished":"Jul 8, 2026, 3:35:39 PM","dateUpdated":"Jul 8, 2026, 7:41:18 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3\nhttps://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","aliases":"CVE-2026-59724\nGHSA-gr94-w7qr-f4j3\n","assigner":"GitHub_M","epss":0.61,"enisaIdProduct":[{"id":"306d9db8-bc4b-3d9e-971c-be8cd693fa0d","product":{"name":"socket.io","vendor":{"name":"socketio"}},"product_version":"6.5.0, \u003c 6.6.7"}],"enisaIdVendor":[{"id":"692b8433-ccd0-3600-b15d-bd8beb85e640","vendor":{"name":"socketio"}}],"enisaIdVulnerability":[{"id":"a5ed82fe-8c84-3bd8-b69f-63d86a399c59","vulnerability":{"id":"CVE-2026-59724","description":"Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can resolve a crafted session ID such as __proto__ through an inherited property of the clients object during WebTransport upgrade handling, causing a TypeError and denial of service. This issue is fixed in version 6.6.7.","datePublished":"Jul 8, 2026, 3:35:39 PM","dateUpdated":"Jul 8, 2026, 7:41:18 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3\nhttps://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","enisa_id":"EUVD-2026-42312\n","assigner":"GitHub_M","epss":0.61,"dataProcessed":"Oct 28, 2026, 7:17:09 AM","vulnerabilityProduct":[{"id":"eeb52a8f-b426-3c13-87ea-e53554997f8d","product":{"name":"socket.io","vendor":{"name":"socketio"}},"product_version":"6.5.0, \u003c 6.6.7"}],"vulnerabilityVendor":[{"id":"ff9b9b4c-06b4-34c6-bacb-4a606016b58c","vendor":{"name":"socketio"}}]}},{"id":"c7c49f93-e86f-3638-835e-7c751e4e0524","vulnerability":{"id":"GHSA-gr94-w7qr-f4j3","description":"Socket.IO: Engine.IO WebTransport SID DoS","datePublished":"Aug 31, 2026, 9:28:12 PM","dateUpdated":"Aug 31, 2026, 9:28:12 PM","baseScore":0.0,"references":"https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-59724\nhttps://github.com/socketio/socket.io/commit/1fa1f46cd420ac5b57bb4c04c959b58f3c79158c\nhttps://github.com/socketio/socket.io\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","enisa_id":"EUVD-2026-42312\n","aliases":"GHSA-gr94-w7qr-f4j3\nCVE-2026-59724\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 2:00:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"26fa9905-85ed-3389-b478-a9db19bb4dc5","advisory":{"id":"RHSA-2026:26994","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Jun 18, 2026, 5:28:56 AM","dateUpdated":"Oct 19, 2026, 11:50:09 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:26994\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26994.json\n","aliases":"CVE-2026-45491\nCVE-2026-45591\nCVE-2026-45736\nCVE-2026-59724\nCVE-2026-59868\nCVE-2026-59870\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"186d72ee-2a8f-3593-823f-6229325d1eca","product":{"name":"aspnetcore-runtime-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1caa9cbe-dbff-3931-a00f-5ccfe122c95c","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.128-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1ed3edbc-415d-3965-90f3-0b086a28a929","product":{"name":"dotnet-runtime-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"29244b7c-4302-320b-844d-066d26cbd715","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"3f937196-2068-32f6-9fb6-8531f03d07de","product":{"name":"dotnet-templates-8.0-0:8.0.128-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4acc50f3-f580-3c3e-a2b3-7cf35e8845bc","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"50f89c56-e570-3c73-bf26-64bb97be686f","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5a0ecc0e-0b90-3753-ae66-27e8a9b897b5","product":{"name":"dotnet8-0-main@src","vendor":{"name":"Red Hat"}}},{"id":"5c9c66b7-03d2-3812-ba2c-0e7bd597d0e0","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5e7c5ec9-58b3-376c-9a63-8460990ba4cb","product":{"name":"dotnet-runtime-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"604f7443-dbaa-3d07-a821-b4c596beff0b","product":{"name":"dotnet8-0-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"61c5a9ef-5ec4-37cc-b40f-fe26e9123735","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"627e38eb-febe-3fa0-b63b-fcf023e56e38","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.128-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6b1097f8-d09a-3f1f-8256-fb1fe5b95f95","product":{"name":"aspnetcore-runtime-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6de2e312-b632-3a1d-a508-6970b4d3cddc","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"84bdc620-5bbc-3419-bac5-78c200291f65","product":{"name":"dotnet-hostfxr-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"859dfed5-96e0-3351-9725-3683eff0d199","product":{"name":"dotnet-templates-8.0-0:8.0.128-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"88b2ca37-0ab1-302b-80ab-785fcbd1942d","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"89d05352-ba35-3c25-abd5-66225e59f77c","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9528ad50-0bad-344b-9c1a-9ed59720c238","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9f13891e-a693-3973-aa31-3913ed923720","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"afa99806-54c7-3e3e-bddd-367335bf32d5","product":{"name":"dotnet-sdk-8.0-0:8.0.128-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"afea80ea-cd5d-38b1-b152-25a2ab2400ba","product":{"name":"dotnet8.0-0:8.0.128-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b52a2baa-62b5-3b06-83fb-fd9d6f48a692","product":{"name":"dotnet-sdk-8.0-0:8.0.128-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"bd7e5721-c010-3586-9d05-c28fbdc442fe","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c7ff96e6-7b9f-301c-885c-ea60e1593abb","product":{"name":"dotnet-hostfxr-8.0-0:8.0.28-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ed1dc4f6-37ae-31e9-9ccd-c264d1494d24","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ee0457bc-3d98-3ffb-b2ca-dcd64b327f69","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.28-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f339e8f2-269a-310a-8457-e69acb70e49f","product":{"name":"dotnet8-0-main@x86_64","vendor":{"name":"Red Hat"}}}]}}]}