PT-2026-27319 · Unknown · Visualfc Liteide

Titan Team · CVE-2026-4742 · Published 2026-03-24 · Updated 2026-05-05

Positive Technologies (AI Summary)

CVSS v4.0

2.9

Low

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions visualfc liteide versions prior to x38.4

Description An inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') exists in visualfc liteide within the http parser.C program files and the liteidex/src/3rdparty/qjsonrpc/src/http-parser modules. This issue could allow for the smuggling of HTTP requests and responses.

Recommendations Update to version x38.4 or later.

Exploit

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2026-4742

Affected Products

Visualfc Liteide

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4742.json · Exploit
• https://github.com/visualfc/liteide/pull/1325 · Patch
• https://osv.dev/vulnerability/CVE-2026-4742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4742 · Security Note
• https://github.com/visualfc/liteide · Note
• https://t.me/cveNotify/162260 · Telegram Post
• https://twitter.com/CVEarity/status/2036846866265215371 · Twitter Post