CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115927
MEDIUMCVSS 5.3NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
Tornado is a Python web framework and asynchronous networking library. Prior to 6.6.0, Tornado decodes HTTP/1.1 chunked transfer encoding by processing body data that has already arrived without yielding to the event loop. A remote unauthenticated peer can send millions of one-byte chunks to monopol
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-112646 MEDIUM 6.5
- CVE-2026-112651 HIGH 8.8
- CVE-2026-112634 MEDIUM 6.5
- CVE-2026-112637 HIGH 8.8
- CVE-2026-112629 MEDIUM 6.5
- CVE-2026-112633 MEDIUM 6.5
- CVE-2026-112623 HIGH 8.8
- CVE-2026-112626 HIGH 8.8
- CVE-2026-112614 MEDIUM 6.5
- CVE-2026-112485