Medium severity5.9NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026

CVE-2026-62899

Description

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Affected products

Net\/.NETllm-fuzzy
Microsoft/Netllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-r6mh-95jw-g7qgghsaADVISORY
github.com/dotnet/announcements/issues/427ghsa
github.com/dotnet/runtime/security/advisories/GHSA-r6mh-95jw-g7qgghsa
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899nvd
nvd.nist.gov/vuln/detail/CVE-2026-62899ghsa

News mentions

Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days
Cyber Security News · Aug 11, 2026

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000