CyberSecBulletin

Libwebsockets vulnerabilities

We track 2 vulnerabilities in Libwebsockets products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Libwebsockets vulnerabilities

  • 8.1 High severity

    libwebsockets: Out-of-bounds Write

    CVE-2026-114550Libwebsockets

    libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to explo

  • 9.8 Critical severity

    libwebsockets: Out-of-bounds Write

    CVE-2026-19773Libwebsockets

    libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit t