CVE WATCH / VULNERABILITY DETAIL
CVE-2026-111748
UNKNOWNCVSS 0NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications that use Request.scheme for
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110674
- CVE-2026-110676
- CVE-2026-109434 MEDIUM 4.3
- CVE-2026-55644
- CVE-2026-3303 LOW 3.7
- CVE-2026-4413 MEDIUM 6.1
- CVE-2026-11319 MEDIUM 6.2
- CVE-2026-111755
- CVE-2026-111759 HIGH 7.5
- CVE-2026-107084