PT-2026-27319 · Unknown · Visualfc Liteide

Titan Team · Published 2026-03-24 · Updated 2026-05-05 · CVE-2026-4742

Positive Technologies (AI Summary)

CVSS v4.0

2.9

Low

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:N/E:P/S:N/AU:N/R:U/V:D/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions visualfc liteide versions prior to x38.4

Description An inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') exists in visualfc liteide within the http parser.C program files and the liteidex/src/3rdparty/qjsonrpc/src/http-parser modules. This issue could allow for the smuggling of HTTP requests and responses.

Recommendations Update to version x38.4 or later.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2026-4742

Affected Products

Visualfc Liteide

References · 4

• https://github.com/visualfc/liteide/pull/1325 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-4742 · Security Note
• https://twitter.com/CVEarity/status/2036846866265215371 · Twitter Post
• https://t.me/cveNotify/162260 · Telegram Post