CVE-2026-115877Published
Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Exact source revision recorded 23 Oct 2026 21:48:20 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-115877 · Microsoft / collected KEV context
cve-program · CVE-2026-115877
- https://github.com/twisted/twisted/security/advisories/GHSA-q7qq-6mhp-9rc4
- https://github.com/twisted/twisted/pull/12755
- https://github.com/twisted/twisted/commit/022b6f7feb5980166c71f54e2c0d8f4f21ff6e1a
- https://github.com/twisted/twisted/commit/1616f702d36eda8990a5a5b22ad70fab140a7eb1
- https://github.com/twisted/twisted/releases/tag/twisted-26.10.0rc1
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.