CVE-2026-109869Suited to automated attack · CISA
undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
CVSS score
7.5
EPSS probability
%0.3
Risk score
0.0
Published
3 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
7.5
CVE-2026-12151undici WebSocket client vulnerable to denial of service via fragment count bypass
Patch status unknownEPSS %1
7.4
7.5
CVE-2026-1528undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client
Patch status unknown Public Exploits:1EPSS %0
7.5
CVE-2026-6734undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-109869"