CVE WATCH / VULNERABILITY DETAIL
CVE-2026-87863
UNKNOWNCVSS 0NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog