CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111063
UNKNOWNCVSS 0NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110674
- CVE-2026-110676
- CVE-2026-109434 MEDIUM 4.3
- CVE-2026-55644
- CVE-2026-3303 LOW 3.7
- CVE-2026-4413 MEDIUM 6.1
- CVE-2026-11319 MEDIUM 6.2
- CVE-2026-111755
- CVE-2026-111759 HIGH 7.5
- CVE-2026-107084