VulnSocial

CVE-2026-66729Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32_t wraparound in http_mime_parser.h causing an out-of-bounds memory read past the name pointer, resulting in a bus fault that crashes the handling worker with a single POST request.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-27: 2Technical Details · 2026-07-27: 207-27
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-66729 http://facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the s… https://www.cve.org/CVERecord?id=CVE-2026-66729 ----- Traducción: CVE… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑66729, detailing an integer underflow in facil.io’s MIME parser that permits unauthenticated remote attackers to crash the service; no exploit, patch, or active exploitation information is provided.

    0000023
    95 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-66729 http://facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the s… https://www.cve.org/CVERecord?id=CVE-2026-66729

    Post summary

    The text discloses an integer underflow flaw in facil.io packages (0.6.0–0.7.6) that can be triggered by unauthenticated remote attackers for a crash, without mentioning a PoC, exploit, or patch.

    000001.2K
    57.9K followersView on X

Explore more

Back to dashboard