What is CVE-2026-66730?
CVE-2026-66730 is a denial-of-service vulnerability in the multipart body parser of facil.io versions 0.6.0 through 0.7.6. An unauthenticated remote attacker can permanently freeze worker processes at 100% CPU by sending a specially crafted multipart/form-data request with a partial closing boundary. Updating facil.io to a secure version is recommended.
Azərbaycanca: CVE-2026-66730, facil.io veb serverinin 0.6.0 ilə 0.7.6 versiyaları arasında `multipart body parser`-də xidmətdən imtina (DoS) zəifliyidir. Autentifikasiya olmamış uzaq hücumçu, natamam bağlanma sərhədi olan xüsusi `multipart/form-data` sorğusu göndərərək işçi prosesləri 100% CPU istifadəsi ilə daimi olaraq dondurur. facil.io-nu təhlükəsiz versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
Which versions of facil.io are affected by CVE-2026-66730?
CVE-2026-66730 affects facil.io web server versions 0.6.0 through 0.7.6.
How can an attacker exploit CVE-2026-66730 to cause damage?
An attacker can cause a denial of service by sending a specially crafted multipart/form-data request with a partial closing boundary without authentication, which permanently freezes worker processes at 100% CPU usage.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.