CVE-2026-77341Proof of concept (PoC) published · CISA
cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing
CVSS score
5.3
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.9
CVE-2026-45372
Vulnerability in Yhirose Cpp Httplib
Y
Patch status unknown Public Exploits:1EPSS %0
8.2
CVE-2026-77358
cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()
Y
Patch status unknownEPSS %0
7.5
CVE-2026-46527
NULL pointer dereference in Yhirose Cpp Httplib
Y
Patch status unknown Public Exploits:1EPSS %0
7.5
CVE-2026-45352
Improper input validation in Yhirose Cpp Httplib
Y
Patch status unknown Public Exploits:1EPSS %0
7.5
CVE-2026-102944
cpp-httplib: Cookie header leaked on cross-origin redirect
Y
Patch status unknownEPSS %0
7.4
CVE-2026-54919
Improper certificate validation in Yhirose Cpp Httplib
Y
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77341"