CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2026-54399

CWE-400

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

CVSS Score
7.5
High
EPSS — Exploit Probability
0.4%
Riskier than 33% of all CVEs
Exploitation
Not in CISA KEV
No federal exploitation record
Remediation
unknown
Check vendor advisories
NVD entry PoC / advisory

1 article across 1 outlet · first covered Jul 2, 2026 · latest Jul 2, 2026

Coverage timeline