PT-2026-63528 · Boazsegev · Facil.Io

Fantasy_2026 · CVE-2026-16632 · Publicado 2026-07-22 · Atualizado 2026-07-23

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket on protocol error in the library lib/facil/http/parsers/websocket parser.h of the component WebSocket Frame Parser. This manipulation of the argument on message causes improper input validation. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2026-16632

Produtos afetados

Facil.Io

Referências · 7

• 🔥 https://github.com/boazsegev/facil.io/issues/169 · Exploit
• https://vuldb.com/cve/CVE-2026-16632 · Nota
• https://vuldb.com/vuln/382382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-16632 · Nota de Segurança
• https://vuldb.com/submit/860585 · Nota
• https://vuldb.com/vuln/382382/cti · Nota
• https://github.com/boazsegev/facil.io · Nota