Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via set_exception_handler(), the library catches the exception and writes its message directly into the HTTP response as a header named EXCEPTION_WHAT. This header is sent to whoever made the request, with no authentication check and no special configuration required to trigger it. The behavior is on by default. A developer who does not know to opt in to set_exception_handler() will ship a server that leaks internal exception messages to any client. This vulnerability is fixed in 0.35.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-04 | 2 | Disclosure1General1 |
| 2026-03-05 | 1 | Disclosure1 |
CVE-2026-28434 Information Disclosure in cpp-httplib via Unhandled Exception Leakage https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28434
Post summary
CVE-2026-28434 is an information disclosure vulnerability in cpp-httplib triggered by unhandled exception leakage, as reported on Vulmon. No PoC, exploit, or patch details are included in the brief description.
🚨*CVE* CVE-2026-28434 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application h… https://www.cve.org/CVERecord?id=CVE-2026-28434 ----- Traducción: CVE-2026-28434 cpp… http://infoflow.cloud`
Post summary
The tweet mentions CVE‑2026‑28434 in the cpp‑httplib library with a version-specific issue, but lacks any evidence of exploitation, fixes, or a PoC.
CVE-2026-28434 cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application h… https://www.cve.org/CVERecord?id=CVE-2026-28434
Post summary
The text announces CVE‑2026‑28434 for cpp‑httplib, noting an exception‑handled flaw in versions before 0.35.0, but offers no PoC, exploit, active‑use claim, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | yhirose | cpp-httplib | - | - | - |