CVE-2026-78667Suited to automated attack · CISA
Lack of limit on size of parsed Range headers in net/http
CVSS score
7.5
EPSS probability
%0.4
Risk score
0.0
Published
7 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2022-32189Panic when decoding Float and Rat types in math/big
Patch verifiedEPSS %3
7.5
CVE-2025-61726Memory exhaustion in query parameter parsing in net/url
Patch verifiedEPSS %2
9.6
7.5
CVE-2026-25679Incorrect parsing of IPv6 host literals in net/url
Patch status unknownEPSS %1
7.5
CVE-2026-33811Crash when handling long CNAME response in net
Patch verifiedEPSS %1
7.5
CVE-2026-42499Quadratic string concatenation in consumePhrase in net/mail
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-78667"