Denial of Service Vulnerability in Restbed by Corvusoft

CVE-2026-103471

What is CVE-2026-103471?

The vulnerability in Restbed allows remote unauthenticated attackers to exploit the server by sending HTTP request headers without a size limit. This can lead to the exhaustion of server memory, as attackers can establish TCP connections and indefinitely stream data without providing the required header delimiter. Consequently, this forces the server to allocate unbounded heap memory, potentially leading to server crashes and unavailability, as the process may be terminated when memory resources are depleted.

References