Skip to content
Threat Feed
Subscribe

Tag

Smuggling

1 brief RSS
low advisory

Apache Sling Engine: HTTP request smuggling vulnerability (CVE-2026-103866)

Apache Sling Engine before 3.0.4 contains an HTTP request smuggling vulnerability due to an inconsistent, hand-rolled parameter parser that fails to reject malformed percent-escapes and invalid charsets.

Sling Engine cve-2026-103866 smuggling web-vulnerability http
1c