Skip to content

CVE-2026-40560

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
May 8, 2026
Last Seen
May 8, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical HTTP Request Smuggling Vulnerability in Starman Web Server72.6

A critical vulnerability has been identified in Starman versions prior to 0.4018, allowing HTTP Request Smuggling due to improper header precedence. The issue arises when both 'Content-Length' and 'Transfer-Encoding: chunked' headers are present, with Starman incorrectly prioritizing 'Content-Length...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitFedoraPSGIStarmanPerlHTTP Request Smuggling Via Improper Header Precedence