Skip to content
Threat Feed

Tag

CVE-2026-27889

1 brief RSS
high advisory

NATS Server WebSocket Frame Length Overflow Denial of Service

A vulnerability in NATS server allows a remote, unauthenticated attacker to cause a denial of service by sending a crafted WebSocket frame, leading to a server crash due to missing validation on WebSocket frame length.

nats websocket denial-of-service CVE-2026-27889 server-crash
2r 1t