Verified

CVE-2026-78667: net/http 0 to before 1.26.9, 1.27.0-0 to before 1.27.2

Affected technology

net/http · 0 to before 1.26.9, 1.27.0-0 to before 1.27.2
Go standard library

Component: Not specified by the source
Function: parseRange, ServeContent, ServeFile, ServeFileFS, fileHandler.ServeHTTP, fileTransport.RoundTrip

What an attacker can do

The source does not specify what an attacker can achieve.

Published 2026-10-09 03:15:37.146409+00:00

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-09 03:17:07.463462+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-09 03:13:32.966430+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-78667.html