{"id":"EUVD-2026-42313","enisaUuid":"f13e4256-2596-3833-8198-b5c4afd73a91","description":"Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated attacker to exhaust server-side connections and sockets. This issue is fixed in version 6.6.7.","datePublished":"Jul 8, 2026, 3:37:52 PM","dateUpdated":"Oct 14, 2026, 6:46:37 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x\nhttps://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","aliases":"CVE-2026-59725\nGHSA-r635-g3xr-vw7x\n","assigner":"GitHub_M","epss":0.64,"enisaIdProduct":[{"id":"24637128-234f-35f7-9177-849d0e5f308c","product":{"name":"engine.io","vendor":{"name":"socketio"}},"product_version":"4.1.0, \u003c 6.6.7"}],"enisaIdVendor":[{"id":"0cad311d-0f45-33e0-9ac1-2c8f447e46d9","vendor":{"name":"socketio"}}],"enisaIdVulnerability":[{"id":"0576bdee-9c4e-3d5c-bcd2-7c58026cce63","vulnerability":{"id":"CVE-2026-59725","description":"Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not properly close the HTTP response for invalid binary POST requests with Content-Type: application/octet-stream, allowing an unauthenticated attacker to exhaust server-side connections and sockets. This issue is fixed in version 6.6.7.","datePublished":"Jul 8, 2026, 3:37:52 PM","dateUpdated":"Oct 14, 2026, 6:46:37 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x\nhttps://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","enisa_id":"EUVD-2026-42313\n","assigner":"GitHub_M","epss":0.64,"dataProcessed":"Oct 30, 2026, 7:17:41 AM","vulnerabilityProduct":[{"id":"09189166-edd9-3dda-aeeb-ec22c27b5b1b","product":{"name":"engine.io","vendor":{"name":"socketio"}},"product_version":"4.1.0, \u003c 6.6.7"}],"vulnerabilityVendor":[{"id":"e78c003e-978a-37b4-a965-16c954636166","vendor":{"name":"socketio"}}]}},{"id":"16291167-eab4-3524-bd5a-75e077975e8a","vulnerability":{"id":"GHSA-r635-g3xr-vw7x","description":"Socket.IO: Engine.IO Polling Transport Connection Exhaustion","datePublished":"Jul 20, 2026, 9:49:54 PM","dateUpdated":"Jul 20, 2026, 9:49:54 PM","baseScore":0.0,"references":"https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-59725\nhttps://github.com/socketio/socket.io/commit/fc11285e14964c2132d122164bf130c355f60671\nhttps://github.com/socketio/socket.io\nhttps://github.com/socketio/socket.io/releases/tag/engine.io@6.6.7\n","enisa_id":"EUVD-2026-42313\n","aliases":"CVE-2026-59725\nGHSA-r635-g3xr-vw7x\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"06da07bf-435e-36e3-8b4a-bf868d025fe8","advisory":{"id":"RHSA-2026:37577","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Jul 10, 2026, 5:14:22 AM","dateUpdated":"Oct 23, 2026, 5:33:12 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:37577\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37577.json\n","aliases":"CVE-2026-39243\nCVE-2026-39245\nCVE-2026-59725\nCVE-2026-59869\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"07f621d2-8025-3551-92ca-92aa3ac26ff8","product":{"name":"dotnet8-0-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1d0a7807-da51-3a7f-9dc0-463be7dc8871","product":{"name":"dotnet-templates-8.0-0:8.0.128-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"247f6dd9-b32f-3064-914d-1cd87e83145e","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"24ddc68a-a183-38c3-8884-2457aab85fac","product":{"name":"dotnet8-0-main@src","vendor":{"name":"Red Hat"}}},{"id":"2da6edea-68e8-3f96-a4ed-27a37e6f6460","product":{"name":"dotnet-hostfxr-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"37d573bb-eff9-340e-aac8-adcda5e14b30","product":{"name":"dotnet-runtime-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3cd9aa1c-6068-3e4d-b341-1fec284a51c6","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"50b1f2e1-7d43-37fe-a165-15b1140176ea","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5446b24e-32a6-30c0-a842-804199eba661","product":{"name":"dotnet8-0-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5ecbb073-a163-3605-bb0a-3cfb589e3bcc","product":{"name":"aspnetcore-runtime-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6bd335ad-83f3-3e80-872b-6487125e205c","product":{"name":"dotnet-sdk-8.0-0:8.0.128-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6cb81ccd-a86a-3e45-a083-7e76c0e973c5","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6fd80e59-2751-3f2d-85c0-d2cab6791846","product":{"name":"dotnet-hostfxr-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6fdd6385-2b89-369b-87eb-775dcf5528ef","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"77667c33-b4f7-3416-bd31-b20ab134e5c6","product":{"name":"dotnet-templates-8.0-0:8.0.128-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7fd60362-1ed8-30e0-a735-26a0441e67cb","product":{"name":"aspnetcore-runtime-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"8fe39935-2479-3779-86a8-f55eea9c7bac","product":{"name":"dotnet8.0-0:8.0.128-1.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"9a577408-00c1-39aa-a316-5cd5c03af9bf","product":{"name":"dotnet-runtime-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a94e92f4-a19e-3335-b89b-8308826bf65b","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"af5f87b9-a510-331b-a7f7-c88106c7b7f7","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b2be1514-d4f2-3c8b-ad51-c3ddb9baa27a","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c220e8db-e370-36e8-9cf5-e3ed7be045ee","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.28-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ccb1d124-136d-3fbe-8e53-e6472f2236df","product":{"name":"dotnet-sdk-8.0-0:8.0.128-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cd6019ea-e5da-3d40-b3a1-ab510970cb9b","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.128-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"d193f042-7d78-31a8-9fd2-14858ad8f711","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.128-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"d7cd0ffd-a9a1-3ffd-9086-e298896348a2","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"e281239e-6656-34ca-8018-a6bbdff55a91","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.28-1.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f6c3be45-ff80-3457-a28e-cd60a337f8e1","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.128-1.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ffc21602-b291-3660-92f5-9b3bebc61dba","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}},{"id":"e1998408-5ece-3aa9-a884-de882a1284a4","advisory":{"id":"RHSA-2026:42986","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Jul 21, 2026, 7:58:15 PM","dateUpdated":"Oct 14, 2026, 7:44:40 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:42986\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42986.json\n","aliases":"CVE-2026-59725\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"017a5387-3437-37aa-b340-aa135276ef3c","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.129-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"12ca9c86-e1bc-3c55-8da9-65f3d276cd40","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"1d3be108-c2e4-3469-9f93-48355153176e","product":{"name":"dotnet-hostfxr-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"206ce691-014f-3911-a500-19d676fc3419","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"2145bb63-40a4-3cce-a296-cc8a1840c840","product":{"name":"dotnet-sdk-8.0-0:8.0.129-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"24caf0d1-3a2a-3282-81da-2bafd9ad9486","product":{"name":"dotnet-runtime-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"2feba25c-cdf4-3533-b139-8388d52678a4","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3620422b-47eb-3052-9191-c66868ff61c3","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3a468598-dbb5-30a6-83eb-e683d8f9d89b","product":{"name":"dotnet8-0-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4027280d-1fd8-3ba4-99eb-7268022963bf","product":{"name":"dotnet-hostfxr-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"40c9af18-aca3-35ab-8858-636c837f1476","product":{"name":"aspnetcore-runtime-dbg-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"422869a2-162f-3ef8-8d7c-2de48a7edfa8","product":{"name":"aspnetcore-runtime-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"441aa384-622e-303c-adfc-c5ce4f39e8d9","product":{"name":"dotnet-sdk-dbg-8.0-0:8.0.129-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"459cd306-1ca5-388f-b7de-55de44facd4c","product":{"name":"dotnet-runtime-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"4bebf142-bbbe-34f1-b15f-ba07f6bb72da","product":{"name":"aspnetcore-runtime-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6050a71b-4634-38e3-ab06-dd347fb31e01","product":{"name":"dotnet8-0-main@src","vendor":{"name":"Red Hat"}}},{"id":"678aa81e-9096-36a3-9483-4da0f7c58e40","product":{"name":"dotnet-templates-8.0-0:8.0.129-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"71d9bd45-d74d-3aa4-bafb-68e9ed246a05","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7d7d19d3-05c7-3498-a012-c27fcc7d1207","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7ec17889-1ef8-3ef9-a268-9d287f74801c","product":{"name":"dotnet8.0-0:8.0.129-2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"8a10b8c2-a3c0-3cb4-8663-9c8c9564bf50","product":{"name":"dotnet-sdk-8.0-0:8.0.129-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8e057430-2372-350a-901a-71637d1ea617","product":{"name":"dotnet-templates-8.0-0:8.0.129-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"a8cec691-4410-3a9f-af0e-6a3fce59b301","product":{"name":"dotnet-runtime-dbg-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b9922186-92cf-319a-bdd0-5be0d2dcde94","product":{"name":"aspnetcore-targeting-pack-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c2a3fba3-e8df-3ef6-b1a6-d6120a4505d2","product":{"name":"dotnet-targeting-pack-8.0-0:8.0.29-2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c4852106-8db2-3125-8da8-4b65e602aa68","product":{"name":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.129-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f3797197-9bda-3620-a1ec-9073b372bf2c","product":{"name":"dotnet-apphost-pack-8.0-0:8.0.29-2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"f54601dd-8e6b-377f-9d3b-781dfbeeba66","product":{"name":"dotnet8-0-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f85839c3-7dbc-3da6-a1fd-329ef4b965ba","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}}]}}]}